On 27.10.2017 00:53, krz...@gmail.com wrote: > I got multiple versions of openssl in my system. I compile dovecot with > PKG_CONFIG_PATH=/usr/openssl-1.0.2l-fpic/lib/pkgconfig ./configure > > How do I check which version of openssl got compiled in? configure > script does not show version. There seem to be no way to check it in > compiled binary (?) > > My dovecot is still seen vulnerable by tls testing tools so I'm > guessing wrong version of openssl got compiled it but there seem to be > no way to check it. You can check with ldd /usr/lib/dovecot/imap-login (or libexec)
Just check which SSL library has been linked to it. Aki
