I was thinking that maybe the banners can give some insight as to whether a server is using OpenSSL. Is there any tell tale signs that a server is using OpenSSL?
Speaking in terms external; as in, if I went probing around the web or Shodan, is there a way to identify servers that use OpenSSL?
To those who are wary, I'm just asking because I have to check if my servers are vulnerable;
-- Possible Method:
$ openssl s_client -connect server.com:443 -tlsextdebug | grep “server extension”
Is this a method to identify if server.com uses openssl?