Upgrade OpenSSL version manually with latest update if it not present in yum

for check server header information

curl --head http://domain name/
curl -v http://domain name/

wget https://www.openssl.org/source/openssl-1.0.2o.tar.gz

./config --prefix=/usr --openssldir=/usr/local/openssl shared
make
make test
sudo make install

After manually install OpenSSL will not be integrated with Apache for that we have to run below.

This show all shared library information with mod_ssl.so

ldd /usr/lib64/httpd/modules/mod_ssl.so | egrep 'lib(ssl|crypto)'

ls -lh /lib64/libcrypto.so.10
cd /lib64/
rm -rf libcrypto.so.10
ln -s ../usr/lib64/libcrypto.so.1.0.0 libcrypto.so.10

rm -rf libssl.so.10
ln -s libssl.so.10 ../usr/lib64/libssl.so.1.0.0

/etc/init.d/httpd reload

check server header again which show latest OpenSSL configured with Apache.


Hide Apache version and Server Header

vi /etc/httpd/conf/httpd.conf  at end of file add below

ServerSignature Off
ServerTokens Prod

/etc/init.d/httpd reload