'High severity' flaw discovered in OpenSSL

By Juha Saarinen on Jul 10, 2015 6:13AM

Certificate bypass check possible.

A limited number of the popular open source OpenSSL cryptographic library is vulnerable to a serious flaw that permits silent, man-in-in-the middle interception attacks. OpenSSL attempts to find an alternative digital certificate chain should the first attempt to build the verification trail ...

Hi! You've reached one of our premium articles. This is available exclusively to subscribers.

It's free to register, and only takes a few minutes.

Once you sign up you'll have unlimited access to the full catalogue of Australia's best business IT content, as well as a daily news bulletin delivered straight to your inbox.

Already have an account? Log in to read this article.

Got a news tip for our journalists? Share it with us anonymously here.