there is now more than one vulnerability in OpenSSL.
ERROR("Security advisory %s (%s)", defect->id, defect->name);
ERROR("%s", defect->comment);
+ INFO("Once you have verified libssl has been correctly patched, "
+ "set security.allow_vulnerable_openssl = '%s'", defect->id);
+
bad = true;
}
}
- if (bad) {
- INFO("Once you have verified libssl has been correctly patched, "
- "set security.allow_vulnerable_openssl = '%s'", libssl_defects[0].id);
- return -1;
- }
+ if (bad) return -1;
return 0;
}