Open SSL Heartbeat Bug

[Robert Feldman]

Has anyone made a new build of TTPub using recent versions of Open SSL that fix the Heartbeat bug? If not, are there any plans to do so?

[Frank]

I'm not actually following here.   TTPUB doesn't have any SSL certs...it's just compiled java bytecode packaged into a .war file, along with dependent .jar files (none of which are ssl related, afaik).  On the systems I run TTPUB, I did upgrade Linux, and upgraded the ssl certificates I serve from Apache...but TTPUB (and other java / .war apps I've got, along with the version of Tomcat I was using) are the same as prior to Heartbleed.  (Actually, I might dbl-check Tomcat, ala https://wiki.apache.org/tomcat/Security/Heartbleed).

[Robert Feldman]

Ah, yes. The Open SSL message was coming from the Tomcat startup, so the Tomcat Wiki link you provided was what I needed.

 

Thanks.