I've tried the following, but I can't get a build date later than:
Tue, Aug 21 05:18:46 UTC 2012
I have done the following:
apt-get dist-upgrade
apt-get update
apt-get upgrade openssl
and
apt-get purge openssl
apt-get install openssl
and
apt-get purge libcrypto1.0.0
apt-get install libcrypto1.0.0
Everything seems to work fine, but the build date remains as above. And the http://filippo.io/Heartbleed/ test is still failing.
I know I'm not crazy, because I was able to update my identical server Wednesday. (Identical in EVERY way except hardware).
EDIT:
I compared the /etc/apt/sources.list files on both machines and they appear to be identical. How did one server update and the other won't?
EDIT:
Did as suggested:
apt-get purge openssl
reboot
apt-get install openssl
reboot
to no avail.
Tried same commands on libssl1.0.0, still same version as listed above.
This one's got me stumped.
Any suggestions?
EDIT
As soon as I get enough street cred (15), I will +1 the viable workarounds
EDIT
As suggested, I ran apt-get with --reinstall --print-uris and got back:
http://us.archive.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_1.0.1-4ubuntu5.12_amd64.deb
Then rebooted, same version as listed above. Still failing heartbleed.
deb
s off of the ubuntu packages site or something like that. Also, you can upvote on your own questions, and leave comments too, even below the points barrier.dpkg-query --list libssl1.0.0
next, what is "Filename:" fromapt-cache show libssl1.0.0
next, does that match the file you get when youapt-get download libssl1.0.0
?apt-get clean
to clear your download cache, thenapt-get install openssl libssl1.0.0 --reinstall --print-uris
and check the download URIs. Download the packages manually to inspect.