AIX Open Source

 View Only

  • 1.  openssl: tls 1.3

    Posted Wed April 29, 2020 07:12 AM

    Originally posted by: ctremel


    hi,

    we are planning to migrate some of our webservers to the aixtoolbox httpd. as  your packages are linked agains openssl 1.0.X there is no tls 1.3 support which makes our

    security deparment not very happy.

    as you are strongly tied to the openssl packaging, what are your future plans on this topic? will a corresponding aix openssl version be available soon?

    or im i overseeing something?

     

     



  • 2.  Re: openssl: tls 1.3

    Posted Thu April 30, 2020 06:31 AM

    Originally posted by: SandeepUmesh


    Hello

     

    Please note that openssl 1.1.x versions does not have a corresponding FIPS object module and hence it does not satisfy all enterprise customers. Therefore, we are waiting for openSSL community to release 3.0 openSSL version with FIPS module.

    As per community outlook, we will be able to provide openSSL 3.0 version support by Q2 2021 which will have TLS 1.3 support

     

    Thanks



  • 3.  Re: openssl: tls 1.3

    Posted Fri May 08, 2020 06:04 AM

    Originally posted by: Morten_Torstensen


    But will we have an openssl 1.1.x version for AIX soon? Current version 1.0.2t is getting a bit old and is a security risk.



  • 4.  Re: openssl: tls 1.3

    Posted Mon May 18, 2020 05:07 AM

    Originally posted by: sanket


    I think there is no plan for 1.1.x version of openssl for AIX. AIX is planning 3.0 openssl version.