Edit: Please follow the above link to the original.

I have a self-signed certificate which is use to sign other certificates that I issued. This is all done with an affected version of OpenSSL. These certificates are installed on Windows servers for encryption of https traffic. OpenSSL is NOT installed on the servers. From what I understood, heartbleed only affects servers which directly use OpenSSL to encrypt the traffic. Is this correct or am I still vulnerable?

  • 1
    No, you are not vulnerable. – Xander Apr 9 '14 at 16:10
  • 2
    This is essentially a duplicate of this question. Basically all questions that ask "is [non TLS component] affected by Heartbleed?" – Lekensteyn Apr 9 '14 at 16:19
  • @Lekensteyn Thank you for the link, that does answer my question. – Despertar Apr 9 '14 at 16:33
  • 3
    @ack__ It's better to reduce the number of duplicate questions, so please vote for closure. – Lekensteyn Apr 9 '14 at 16:43
  • 2
    @Lekensteyn I agree, except the linked answer should have a better title. It's title basically a list its tags. I'm sure a lot of people will miss it. I have submitted an edit to fix it. – Despertar Apr 9 '14 at 17:02