built and installed OpenSSL 1.0.1c on a RedHat linux box. $ openssl version OpenSSL 1.0.1c 10 May 2012
I then compiled and installed Apache HTTP Server (version 2.2.23 with mod_ssl). $ lwp-request -m HEAD myexample.com 200 OK Connection: close Date: Thu, 17 Jan 2013 20:29:44 GMT Server: Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_jk/1.2.37 As you can see from above output, Apache isn't using the latest version of OpenSSL install on this machine. Why? How do I fix that? The reason I need this is that for our server to be PCI compliant, it should be using the latest version of OpenSSL. Thanks for your help!
