سؤال

I have an Elastic Load Balancer on AWS that does NOT terminate the SSL connection on the Load Balancer. Was my connection vulnerable to the HeartBleed bug before Amazon patched the ELB service?

My understanding is that only connections that terminated the SSL on the Load Balancer were affected. Can anyone confirm this?

هل كانت مفيدة؟

المحلول

Did you instead terminate SSL on your own instances? If so then you need to look at the version of OpenSSL on those systems as they might be vulnerable to heartbleed.

مرخصة بموجب: CC-BY-SA مع الإسناد
لا تنتمي إلى StackOverflow
scroll top