阿里云 Ubuntu 12.02 如何升级 openssl，去掉导致网站 F 分的两个 bug？

This topic created in 3620 days ago, the information mentioned may be changed or developed.

This server is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224) and exploitable. Grade set to F.
This server is vulnerable to the OpenSSL Padding Oracle vulnerability (CVE-2016-2107) and insecure. Grade set to F.

1 replies • 2016-12-15 11:47:09 +08:00

iyaozhen

Dec 15, 2016 via Android

12 版本还在支持的周期中吗？不然 apt upgrade 就行。
不行的话只能自己编译了，然后 Nginx 也要重新编译。之前为了 http2 重新搞过，你参考下： https://iyaozhen.com/nginx-http2-conf.html