How to check which version of openssl is getting compiled in into dovecot?

Aki Tuomi aki.tuomi at dovecot.fi
Fri Oct 27 09:33:04 EEST 2017



On 27.10.2017 00:53, krzf83 at gmail.com wrote:
> I got multiple versions of openssl in my system. I compile dovecot with
> PKG_CONFIG_PATH=/usr/openssl-1.0.2l-fpic/lib/pkgconfig ./configure
>
> How do I check which version of openssl got compiled in? configure
> script does not show version. There seem to be no way to check it in
> compiled binary (?)
>
> My dovecot is still seen vulnerable by tls testing tools so I'm
> guessing wrong version of openssl got compiled it but there seem to be
> no way to check it.
You can check with ldd /usr/lib/dovecot/imap-login (or libexec)

Just check which SSL library has been linked to it.

Aki


More information about the dovecot mailing list