[rabbitmq-discuss] Heartbleed SSL vulnerability does not affect RabbitMQ

Simon MacMullen simon at rabbitmq.com
Tue Apr 8 17:32:36 BST 2014


Just in case people are worrying about this:

Erlang uses OpenSSL for crypto functions but does *not* use OpenSSL's 
implementation of the SSL / TLS protocol. So even if you have a bad 
version of OpenSSL linked to Erlang / RabbitMQ you are still safe.

See http://erlang.org/pipermail/erlang-questions/2014-April/078538.html 
for a bit more detail.

Cheers, Simon

-- 
Simon MacMullen
RabbitMQ, Pivotal


More information about the rabbitmq-discuss mailing list