The OpenSSL package is an open source for effort to develop a security purpose, robust, Open Source toolkit implementing the Secure Sockets Layer

To avoid this vulnerability, you need to disabling SSL and using only TLSv1.1 or TLSv1.2. Redhat, centos can supports to use SSLv2 or SSLv3 protocols,

Once you have configured the SSL for the domain name, if its does not open the page with https may be it was overwriting the header.