8 Apr
2014
8 Apr
'14
8:28 a.m.
Randy Bush <randy@psg.com> writes:
you might like (thanks smb, or was it sra)
openssl s_client -connect google\.com:443 -tlsextdebug 2>&1| grep 'server extension "heartbeat" (id=15)' || echo safe
protip: you have to run this from a device that actually is running 1.0.x, i.e. supports the heartbeat extension. your desktop mac (running 0.9.8y if you're running mavericks and haven't stomped on it via ports; homebrew is a keg only install) WILL NOT SUFFICE and will just sit there quietly until the http server times out (60 seconds in my case) and then echo "safe" even when you're not. -r