EDR: What Version of OpenSSL is Used?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

What version of OpenSSL is used by the EDR server?

Environment

• EDR Server: All Versions

Resolution

The following command will output the OpenSSL version being used on the Server version installed

/usr/local/openresty/nginx/sbin/nginx -V

EDR uses a virtual environment with it's own version of openssl. To check the version being used by the OS run this command

rpm -qa | grep openssl

The version shown here can and should be upgraded as needed because it doesn't affect the EDR installation

Additional Information

• Windows Sensor 6.2.4 and above do not utilize OpenSSL
• Linux Sensor uses OpenSSL 1.1.1
• Hosted EDR is utilizing 1.0.2x