[Ach] 'Heartbleed' and OpenVPN

Pepi Zawodsky pepi.zawodsky at maclemon.at
Tue Apr 8 12:15:08 CEST 2014


On 08.04.2014, at 12:07, René Pfeiffer <lynx at luchs.at> wrote:
>  'Heartbleed' bug

Don't know enough about it yet, but testing tools of mixed quality are popping up:

Both can only test implicit SSL/TLS but not STARTTLS

For publicly reachable services (443, 465, 993, 995)
http://filippo.io/Heartbleed/

Also for private services
http://s3.jspenguin.org/ssltest.py

Best regards
Pepi


More information about the Ach mailing list