Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
23.7 Legacy Series
»
EOL OpenSSL 1.1.1 Sept 11 2023
« previous
next »
Print
Pages: [
1
]
Author
Topic: EOL OpenSSL 1.1.1 Sept 11 2023 (Read 991 times)
flushell
Newbie
Posts: 43
Karma: 3
EOL OpenSSL 1.1.1 Sept 11 2023
«
on:
September 12, 2023, 08:48:36 pm »
OpenSSL 1.1.1 has ended their support for version 1.1.1
on sept 11 2023. OPNsense is on 1.1.1 and I think it's because of
FreeBSD stable is still stuck on 1.1.1
. There are packages on ports for OpenSSL 3+ though...
There are people warning for this for some time now. When is the switch to 3.0 or 3.1 planned? Is it posible OPNSense goes ahead with it before FreeBSD does, or is that too complex? Couldn't find info on this subject, except that FreeBSD is planning it fot 14.x somwhere in 2026! Shouldn't it be quite soon, because official support for 1.1.1 upstream has now come to an end?
«
Last Edit: September 12, 2023, 08:50:46 pm by flushell
»
Logged
franco
Administrator
Hero Member
Posts: 17570
Karma: 1596
Re: EOL OpenSSL 1.1.1 Sept 11 2023
«
Reply #1 on:
September 12, 2023, 09:07:31 pm »
It is what it is. I could be wrong but I doubt FreeBSD 13 will ever move to OpenSSL 3.
I'm planning to see of the build based on the ports will work, but not before the business edition was branched for 23.10 and I still see a steady stream of third party updates fixing OpenSSL 3 support. It's LibreSSL-class problems all over again
Cheers,
Franco
Logged
Patrick M. Hausen
Hero Member
Posts: 6604
Karma: 560
Re: EOL OpenSSL 1.1.1 Sept 11 2023
«
Reply #2 on:
September 12, 2023, 09:32:54 pm »
I always wonder why people make such a fuss about such things. If the FreeBSD project delivers a supported release with OpenSSL 1.1.1 in the base system, of course that is supported. What upstream does is irrelevant in this context. FreeBSD will get security fixes for this OpenSSL version as long as the base OS is supported.
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
vpx
Jr. Member
Posts: 81
Karma: 5
Re: EOL OpenSSL 1.1.1 Sept 11 2023
«
Reply #3 on:
September 13, 2023, 02:54:03 pm »
https://www.openssl.org/news/vulnerabilities-3.0.html
2023: 14
2022: 15
2021: 2
Total: 31
https://www.openssl.org/news/vulnerabilities-1.1.1.html
2023: 9
2022: 6
2021: 7
Total: 22
Logged
Patrick M. Hausen
Hero Member
Posts: 6604
Karma: 560
Re: EOL OpenSSL 1.1.1 Sept 11 2023
«
Reply #4 on:
September 13, 2023, 04:35:39 pm »
https://www.freebsd.org/security/advisories/
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
23.7 Legacy Series
»
EOL OpenSSL 1.1.1 Sept 11 2023