Question

I have an Elastic Load Balancer on AWS that does NOT terminate the SSL connection on the Load Balancer. Was my connection vulnerable to the HeartBleed bug before Amazon patched the ELB service?

My understanding is that only connections that terminated the SSL on the Load Balancer were affected. Can anyone confirm this?

Était-ce utile?

La solution

Did you instead terminate SSL on your own instances? If so then you need to look at the version of OpenSSL on those systems as they might be vulnerable to heartbleed.

Licencié sous: CC-BY-SA avec attribution
Non affilié à StackOverflow
scroll top