Was my AWS ELB SSL connection vulnerable to HeartBleed

StackOverflow https://stackoverflow.com/questions/22966285

Question

I have an Elastic Load Balancer on AWS that does NOT terminate the SSL connection on the Load Balancer. Was my connection vulnerable to the HeartBleed bug before Amazon patched the ELB service?

My understanding is that only connections that terminated the SSL on the Load Balancer were affected. Can anyone confirm this?

Was it helpful?

Solution

Did you instead terminate SSL on your own instances? If so then you need to look at the version of OpenSSL on those systems as they might be vulnerable to heartbleed.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top