RE: [cobalt-users] mod_SSL virus - finding version of OpenSSL

["Devin Smith" <devinsmith@xxxxxxxxxxxxxxx>]

> I am informed of the above, but when I use netcraft or phpinfo, I am
> informed I am running version 9b

I ran into this also.  When you query a site using netcraft, it caches
the information returned.  The only way I was able to get it to return a
new result was to have it inspect another URL hosted on the same RaQ,
which showed the correct version.  I'd still recommend that once you
have done the update, go into the httpd.conf file and add the line:

ServerTokens ProductOnly

...this will hide all the information about your server that it is
spewing across the internet whenever someone requests a page!  

Oh, and one last thing. You likely need to restart your httpd service
for the changes to take effect.  SSH into your machine and restart the
daemon:

/etc/rc.d/init.d/httpd restart

...and then query it again and see what you get.

Devin