10 Apr
2014
10 Apr
'14
11:04 p.m.
Most people have probably heard about this already, but if not, *patch your OpenSSL now!* and restart your daemons.
CVE-2014-0160
http://arstechnica.com/security/2014/04/critical-crypto-bug-in-openssl-opens...
For some reason you (sometimes) have to reload that page a few times before it actually loads.
This is the worst bug I've seen in like 10 years, insofar as you may have been compromised already, but you don't (can't!) know it and they may be sitting there with your keys, waiting to actually make use of them at a later date.
From how I read it, the only way to be safe & sure is to make a new CSR
and buy a new SSL cert? Or are the cert vendors going to offer a "redo" for free?