3

Edit: Please follow the above link to the original.

I have a self-signed certificate which is use to sign other certificates that I issued. This is all done with an affected version of OpenSSL. These certificates are installed on Windows servers for encryption of https traffic. OpenSSL is NOT installed on the servers. From what I understood, heartbleed only affects servers which directly use OpenSSL to encrypt the traffic. Is this correct or am I still vulnerable?

Improve this question
6
  • 1
    No, you are not vulnerable.
    – Xander
    Apr 9, 2014 at 16:10
  • 2
    This is essentially a duplicate of this question. Basically all questions that ask "is [non TLS component] affected by Heartbleed?"
    – Lekensteyn
    Apr 9, 2014 at 16:19
  • @Lekensteyn Thank you for the link, that does answer my question.
    – Despertar
    Apr 9, 2014 at 16:33
  • 3
    @ack__ It's better to reduce the number of duplicate questions, so please vote for closure.
    – Lekensteyn
    Apr 9, 2014 at 16:43
  • 2
    @Lekensteyn I agree, except the linked answer should have a better title. It's title basically a list its tags. I'm sure a lot of people will miss it. I have submitted an edit to fix it.
    – Despertar
    Apr 9, 2014 at 17:02

0

Reset to default

Browse other questions tagged .