You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Ja...@aol.com on 2002/11/20 16:53:51 UTC

[users@httpd] Openssl library error on Redhat? Slapper?

I get the following entries in my log which I think are slapper worm attacks. 

[mod_ssl: SSL handshake failed (server www.bullnet.co.uk:443, client 
24.210.163.129) (OpenSSL library error follows)
[error] OpenSSL: error:1406B458:lib(20):func(107):reason(1112)

Now I thought my system was uptodate and as such would expect the attack to 
be rejected without seeing a library error. 

Could someone confirm if I should be worried or taking any action?

System is Redhat 7.3
I get the fillowing in respones to a telnet request on port 80 for HEAD / 
HTTP/1.0

Server: Apache/1.3.23 (Unix)  (Red-Hat/Linux) mod_ssl/2.8.7 OpenSSL/0.9.6b 

rpm -q produces the following
mod_ssl-2.8.7-6
openssl-0.9.6b-28

httpd has been restarted since the update.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org