Skip to main content
1 of 2

This server is vulnerable to the OpenSSL Padding Oracle vulnerability (CVE-2016-2107) and insecure. Grade set to F

I am verifying my domain name with SSL LABS and got Grade F

and i got this message

This server is vulnerable to the OpenSSL Padding Oracle vulnerability (CVE-2016-2107) and insecure. Grade set to F.

i am using Ubuntu and implemented following steps:-

**sudo apt-get update && sudo apt-get upgrade**

and following steps

  1. sudo apt-get install make (Install compiling library Make)
  2. wget https://www.openssl.org/source/openssl-1.0.2g.tar.gz
  3. tar -xzvf openssl-1.0.2g.tar.gz
  4. cd openssl-1.0.2g
  5. sudo ./config
  6. sudo make install
  7. sudo ln -sf /usr/local/ssl/bin/openssl which openssl

after this i run this command openssl version -v and i got the result OpenSSL 1.0.2g 1 Mar 2016

Any idea why i am getting this OpenSSL oracle padding vulnerability (CVE-2016-2107) issue? My ubuntu version is

Distributor ID: Ubuntu
Description:    Ubuntu 14.04.5 LTS
Release:        14.04

Thanks in advance.