#!perl use strict; use warnings; use Test::More; use Crypt::SSLeay::Version qw( openssl_built_on openssl_cflags openssl_dir openssl_platform openssl_version openssl_version_number ); { my $built_on = openssl_built_on(); ok(defined $built_on, 'openssl_built_on returns a defined value'); note $built_on; like( $built_on, qr/\Abuilt on:/, 'openssl_built_on return value looks valid', ); } { my $cflags = openssl_cflags(); ok(defined $cflags, 'openssl_cflags returns a defined value'); note $cflags; like( $cflags, qr/\Acompiler:/, 'openssl_cflags return value looks valid', ); } { my $dir = openssl_dir(); ok(defined $dir, 'openssl_dir returns a defined value'); note $dir; like( $dir, qr/\AOPENSSLDIR:/, 'openssl_dir return value looks valid', ); } { my $platform = openssl_platform(); ok(defined $platform, 'openssl_platform returns a defined value'); note $platform; like( $platform, qr/\Aplatform:/, 'openssl_platform return value looks valid', ); } { my $version = openssl_version(); ok(defined $version, 'openssl_version returns a defined value'); note $version; like( $version, qr/\AOpenSSL/, 'openssl_version return value looks valid', ); } { my $version_number = openssl_version_number(); ok(defined $version_number, 'openssl_int_version returns a defined value'); note sprintf('0x%08x', $version_number); ok ($version_number >= 0x0922, 'OpenSSL version geq lowest known version'); } warn_if_openssl_possibly_vulnerable_to_heartbleed(); done_testing; # see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0160 sub warn_if_openssl_possibly_vulnerable_to_heartbleed { my %vulnerable = map { $_ => undef } ( 0x1000100f, 0x1000101f, 0x1000102f, 0x1000103f, 0x1000104f, 0x1000105f, 0x1000106f, 0x10002001, ); # not one of the vulnerable versions return unless exists $vulnerable{ openssl_version_number() }; # vulnerable version, but heartbeats disabled, so immune return if openssl_cflags =~ m{[-/]DOPENSSL_NO_HEARTBEATS}; my $version_string = openssl_version(); my $built_on = openssl_built_on(); diag(<