OPNsense Forum

Archive => 22.1 Legacy Series => Topic started by: spetrillo on May 27, 2022, 11:44:04 PM

Title: OpenSSL Version 3
Post by: spetrillo on May 27, 2022, 11:44:04 PM
Will we be moving to 3.0.3 of OpenSSL or does that not run on FreeBSD?
Title: Re: OpenSSL Version 3
Post by: antelma on February 03, 2023, 04:47:08 PM
Hi all, there is any update?
Title: Re: OpenSSL Version 3
Post by: Patrick M. Hausen on February 03, 2023, 05:31:41 PM
Why is that question important?
Title: Re: OpenSSL Version 3
Post by: antelma on February 06, 2023, 10:43:26 AM
Hello, I have an openvpn, using the new openvpngui client version 2.60 I can't connect because it uses ssl3, using the previous version 2.58 there are no problems.
I'd like to make sure I don't have compatibility issues in the future
Thanks
Title: Re: OpenSSL Version 3
Post by: Patrick M. Hausen on February 06, 2023, 02:02:12 PM
I hope for you it does not use SSL3  ;) But you probably mean OpenSSL 3.0?

There is work going on to integrate that into FreeBSD but it is still in progress. Many packages break with OpenSSL 3.0 so probably not any time soon.

For the current state of affairs see this bug report:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=258413

OTOH there should not be a fundamental problem connecting an OpenVPN implementation using OpenSSL 3.0 to another using 1.1.1. You just need to pick a common set of cryptographic algorithms.
Title: Re: OpenSSL Version 3
Post by: antelma on February 06, 2023, 03:52:27 PM
Yes, i mean OpenSSL 3.0
Thank you for your response