Security: Update OpenSSL 1.0.2 (old stable; EOL) to 1.1.1 branch (TLS 1.3...)

[Neustradamus]

OpenSSL 1.0.2 is EOL at end of this year, less 15 days (2019-12-31).

Can you update OpenSSL to 1.1.1 branch?

In same time: TLS 1.3 will be here…

Note: https://www.openssl.org/blog/blog/2019/11/07/3.0-update/

[davidep (Davide Principi)]

The openssl package is provided by the upstream CentOS project, which in turn compiles RHEL 7 source code.

RHEL actively patches its packages with latest bug and security fixes. Sometimes during minor distro releases a package version is bumped, provided the newer version is backward compatible.

@Neustradamus

Can you update OpenSSL to 1.1.1 branch?

So the answer is no, we cannot update the version of any package provided by upstream.

I’m closing this thread.

[Neustradamus]

You can change it for a best security and for NethServer admin

• https://www.osradar.com/how-to-install-the-latest-version-of-openssl-on-centos-7/
• http://blog.plura.io/?p=9209

[davidep (Davide Principi)]

Self-compiling arbitrary packages and pushing them into a running system leads to great system unstability.