I work with Ubuntu 14.04 and I can't start the freeradius
deamon (freeradius-server-3.0.9). I have this error that I cannot solve:
Refusing to start with libssl version OpenSSL 1.0.1f 6 Jan 2014
0x1000106f (1.0.1f release) (in range 1.0.1 dev - 1.0.1f release)
Security advisory CVE-2014-0160 (Heartbleed)
For more information see http://heartbleed.com
Once you have verified libssl has been correctly patched, set
security.allow_vulnerable_openssl = 'CVE-2014-0160'
dpkg -l | grep openssl
ii libgnutls-openssl27:i386 2.12.23-12ubuntu2.2 i386 GNU TLS library - OpenSSL wrapper
ii openssl 1.0.1f-1ubuntu2.15 i386 Secure Sockets Layer toolkit - cryptographic utility
ii python-openssl 0.13-2ubuntu6 i386 Python 2 wrapper around the OpenSSL library
apt-cache policy freeradius
freeradius:
Installed: (none)
Candidate: 2.1.12+dfsg-1.2ubuntu8.1
Version table:
2.1.12+dfsg-1.2ubuntu8.1 0
500 http://us.archive.ubuntu.com/ubuntu/ trusty-updates/main i386 Packages
2.1.12+dfsg-1.2ubuntu8 0
500 http://us.archive.ubuntu.com/ubuntu/ trusty/main i386 Packages
apt-cache policy libssl1.0.0:i386
Installed: (none)
Candidate: 2.1.12+dfsg-1.2ubuntu8.1
Version table:
2.1.12+dfsg-1.2ubuntu8.1 0
500 http://us.archive.ubuntu.com/ubuntu trusty-updates/main i386 Packages
2.1.12+dfsg-1.2ubuntu8 0
500 http://us.archive.ubuntu.com/ubuntu trusty/main i386 Packages
dpkg -l | grep libssl
apt-cache policy freeradius