How to install Apache with Openssl 1.0.1?

Question

I want to test Heartbleed on Apache Server. I removed Apache and Openssl from my OS (Ubutu 12.04). I wonder how can I install Apache WITH the Openssl version 1.0.1 in order to be able to test this vulnerability on my own localhost (Apache Server) ?

Answer 1

Yes, you can compile it yourself.

1. Download OpenSSL 1.0.1f:

   wget http://www.openssl.org/source/openssl-1.0.1f.tar.gz
   

2. Extract openssl-1.0.1f.tar.gz:

   tar -xvzf openssl-1.0.1f.tar.gz
   

3. Enter the created directory:

   cd openssl-1.0.1f
   

4. Configure OpenSSL:

   ./config
   

5. Compile OpenSSL:

   make
   

6. Test if everything went right:

   make test
   

7. Install OpenSSL:

   sudo make install
   

Now OpenSSL is installed on your PC and you can test it.