OpenSSL OpenSSL 3.0.0 released

OpenSSL 3.0.6 and below have a critical security vulnerability with fix in OpenSSL 3.0.7 https://twitter.com/prdonahue/status/1584945487727263753

and https://mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html

CentOS 7 uses OpenSSL 1.0.2k and CentOS 7 Centmin Mod Nginx uses OpenSSL 1.1.1 so not impacted unless you optionally enable and use OpenSSL 3.0 yourself.

AlmaLinux 8/Rocky Linux 8 use OpenSSL 1.1.1 for system and for Centmin Mod Nginx OpenSSL. However, AlmaLinux 9/Rocky Linux 9 use OpenSSL 3.0 for system and for Centmin Mod Nginx OpenSSL 1.1.1. Both EL8/EL9 OSes are not publicly supported in Centmin Mod as yet. But private beta testing of EL8 OS for Centmin Mod is underway.

---

 

A

Agreed, though so do live on the edge and use EL9 heh. Just getting the word out anyway

 

Interestingly came across this for Alphine Linux operating system and their discussions about future use of OpenSSL 3 vs LibreSSL https://gitlab.alpinelinux.org/alpine/tsc/-/issues/28

And Rich Salz formerly worked on OpenSSL is critical of OpenSSL 3's plans for QUIC support at https://mta.openssl.org/pipermail/openssl-project/2021-October/002777.html

 

Curious so did some quick benchmarks https://community.centminmod.com/th...marks-openssl-vs-libressl-vs-boringssl.23427/

 

Nope https://community.centminmod.com/th...marks-openssl-vs-libressl-vs-boringssl.23427/