Keen IO and the “Heartbleed” OpenSSL Vulnerability

Incident Report for Keen

Resolved

A security vulnerability in OpenSSL was announced yesterday. Like most of the other sites on the Internet, Keen IO was vulnerable to this. We patched our systems around 9PM PST last night night and completed a deployment of new keys for our SSL certificates at 2:30PM PST today.

During deployment of new keys to the Keen IO infrastructure there was a brief outage caused by a malformed certificate file from approximately 2:01PM PST to 2:06PST. We quickly corrected the issue by reverting to the old keys then deployed new keys at 2:30PM PST.

Posted Apr 09, 2014 - 15:27 PDT