I am verifying my domain name with SSL LABS and got Grade F
and i got this message
This server is vulnerable to the OpenSSL Padding Oracle vulnerability (CVE-2016-2107) and insecure. Grade set to F.
i am using Ubuntu and implemented following steps:-
**sudo apt-get update && sudo apt-get upgrade**
and following steps
- sudo apt-get install make (Install compiling library Make)
- wget https://www.openssl.org/source/openssl-1.0.2g.tar.gz
- tar -xzvf openssl-1.0.2g.tar.gz
- cd openssl-1.0.2g
- sudo ./config
- sudo make install
- sudo ln -sf /usr/local/ssl/bin/openssl
which openssl
after this i run this command openssl version -v and i got the result OpenSSL 1.0.2g 1 Mar 2016
Any idea why i am getting this OpenSSL oracle padding vulnerability (CVE-2016-2107) issue? My ubuntu version is
Distributor ID: Ubuntu
Description: Ubuntu 14.04.5 LTS
Release: 14.04
Thanks in advance.