OpenSSL version in pfSense 2.1.4 seems as 0.9.8y

[localhostx]

Hi,

I have just upgrade the pfSense to 2.1.4 and want to check the openSSL version. It seems that openSSL is still seems to be old. Am I missing something?

[2.1.4-RELEASE][root@abc.def]/root(1): openssl version
OpenSSL 0.9.8y 5 Feb 2013

[localhostx]

seems that there are 2 versions. Is this something expected?

[2.1.4-RELEASE][root@abc.def]/root(12): /usr/bin/openssl version
OpenSSL 0.9.8y 5 Feb 2013

[2.1.4-RELEASE][root@abc.def]/root(18): /usr/local/bin/openssl version
OpenSSL 1.0.1h 5 Jun 2014

[jasonlitka]

Yes.

[jimp]

It's expected. The older version is used by some base OS components, but it does contain patches to correct the vulnerabilities.