砍敺 IT_man 2015-1-12 10:51 蝺刻摩
/ n3 @& |. Q9 F6 f/ S
, G; u5 N' i `/ G9 bOpenSSL憭扳瘣Heartbleed函蝬脰楝撖唾撓摰冽霅血+ \! t9 D0 S1 c* c1 k" a* E
, B( P. d9 D( A! }4 L- Z
9 M3 f2 f" B- e" P, g0 Y! `
OpenSSL慵eartBleed憭扳瘣嚗箏函蝬脰楝撣嗡憭批嚗鋡怨箸舐雯頝舀脖誑靘湧瞍瘣摰敶梢踹惜Ｗ啣憭憭抒桀隞乩摯閮嚗雿桀舐亦荔敶梢輻蝯銝芣蝬脰楝銝隡箸剁瞍瘣航賢冽澆蝔桃蝬脰楝閮剖蝯蝡航蝵殷星C嚗喲ｘndroid璈賡隞亙兢 箇Ⅱ靽雿輻刻鞈摰剁閮鞈銝剖冽迨蝬脰楝蝞∠靘銝Ｗ嗾暺蝣箏祕憟賡脩芣!! " Y& ^7 O7 \% N6 S. r5 T
1.暻潭烙penSSL Bleeding - h) X2 |7 i6 i6 V+ }. g
8 [, P8 ~3 z4 T3 P' ]6 F* V- OpenSSL Bleeding特SL摰鈭(敶梢輻砍1.0.1 1.0.1f / 1.0.2-beta ~ 1.0.2-beta1)瞍瘣
+ ]: {4 j* `/ h/ V
- 餅臭誑望迨瞍瘣敺隡箸刻園銝剛 64 KB鞈嚗望瑕閮園銝剖航賢函璈鞈9 k3 _1 n& y0 E, s* T& ?# a ~
. t2 ]* U- C, J3 ?5 S
2.OpenSSL Bleeding航賡勗拿1 w" [0 y8 I' Y) I0 o8 l+ I
- 餅航梁靘鞈嚗脣雿輻刻撣唾撖蝣潦祉勗撖唾撓靽霅瑞鞈
- 雿輻刻頨思遢嚗脰蝔格靘憒摮email批捆鈭斗鞈靽∠典∟蝑9 l3 g. N4 `0 t4 N" |# `9 f# U
* x- q% }4 Q6 U5 r# p 3.撠蝬脩蝞∠撱箄降 - 蝣箄OpenSSL 祆臬血敶梢選瑼Ｘ交寞(鈭銝) A. Apache 摰鋆桅銝嚗撠暹 OPENSSL-README.txt嚗嗅扳 OpenSSL 祈閮
3 M% T' s! x: u% B7 }% b2 oB.雿輻汪inux_Like雿璆剔頂蝯梯臭蝙冽批嗅賭誘 (Shell Prompt)嚗 Apache OpenSSL 摰鋆桅銝銋bin桅嚗瑁隞歹 openssl version 喳舀亥岷暹 OpenSSL 銋祈閮 - 令penSSL砍敶梢踵殷脰砍蝝嚗 A.拍函頂蝯勗蝝隞(ex. apt-get yum)脰OpenSSL砍蝝
8 ~/ R2 g$ k% O/ o' _6 V! _ 嚗
6 z. N/ b0 ?' K% j% r+ y B.OpenSSL摰寧雯蝡銝頛 OpenSSL 1.0.1g隞乩(tarball)蝝 - 芣瑼Ｘ葫蝬脩臬血歇摰靽桀儔, V2 B. u5 _2 }2 X* [. m9 a2 c
典臭蝙其誑銝蝬脩嚗脰瞍瘣瑼Ｘ葫雿璆准 A.Heartbleed test http://filippo.io/Heartbleed/
6 V1 Q' N: M; s B.LastPass Heartbleed Checker http://lastpass.com/heartbleed/
% ]8 u4 c Q- N" Y! E( d0 _
: |3 k0 V7 W0 H- K1 z
4.撠蝬脩閬質撱箄降. o/ c/ i% x( o0 }, z: P2 _$ D; Q
銝砌蝙刻舐⊥閫瘙榴eartbeat瞍瘣憿嚗粹銝虫臭蝙刻餉行鋆蝵桀憿嚗舐雯蝡蝬脰楝憿嚗雿舐箔踹雿鞈憭瘣抬雿 臭誑∪隞乩芣靽霅瑟芣踝 ' ~# I8 M1 Q9 f, Y( o
- 靽霅西死嚗鈭閫閬賣heartbeat瞍瘣憿蝬脩嚗芸楛鞈航賣憭瘣押
- 交靘閬瘙雿霈游蝣潘隢靘批遣霅啣瑁
- 閫撖芸楛撣唾臬行舐瘣餃嚗銝餃霈游舫餃萎辣蝑閬撖蝣潦
- 雿輻冽啁脫頠擃
- 銝閬摮銝蝬脩嚗撠文嗥雯https://剔蝬脩$ ? H& Y! h$ r8 ^& a
]; F* c( a8 B* z* I" g' d: W/ E 5.蝬脩 `, M+ W, ^* Y( n7 h6 U9 ]) L
r B5 i: k+ V5 z5 Y
' S( S! [$ }4 \) { |
潸” 2015-1-12 10:46:10
嗉
鈭
霈
