Due to heartbleed vulnerability I have recompiled apache with non vulnerable latest openssl(I had to keep old vulnerable openssl due to some dependency problem). It is running fine and when doing heartbleed test for mydomain.com it says 'seems fixed or unaffected'. But if I do apachectl graceful
and take test for heartbleed it says mydomain.com is vulnerable. If I do /usr/local/etc/rc.d/apache2 restart
or apachectl restart
there is no problem.
1)My question is why it takes old openssl library when doing apachectl graceful
only?
2)What is the difference between apachectl restart
and apachectl graceful
when accessing openssl libraries?