This system is running an outdated version of OpenSSL

Felipe Fernandez

• April 21, 2019 06:28

Cpanel

• CENTOS 7.4 xen enterprise hvm
• v76.0.20
• OpenSSL 1.0.2k-fips 26 Jan 2017

Still see this warning Blockers are conditions that do not allow cPanel & WHM to upgrade to a particular version. For more information, read our

• 

  GOT

  • April 21, 2019 12:36

  Something is definitely up with your yum. The latest is 7.6.1810. Try running yum clean all then yum update

  0
• 

  dalem

  • April 21, 2019 17:53

  & that does not work see if you have ssl listed in your exclude file /etc/yum.conf

  0
• 

  cPanelLauren

  • April 23, 2019 18:28

  Both of these are good suggestions, I'll wait for the output of these before requesting anything further.

  0
• 

  mommaroodle

  • April 28, 2019 17:21

  I really cant understand why support for TLSv1.3 is not implemented already! The cPanel documentation states that cPanel uses the OpenSSL version that comes with the operating system. So if one had to manually upgrade and install OpenSSL v1.1.1b, it should only be a matter of setting the SSL protocol and cipher suites and maybe any other adjustment and it should work. I have Centos 7.6 and have installed OpenSSLv1.1.1b - now the only thing that I seem to be battling with the entries - the correct ssl protocols in order for support for v1.2 and 1.3 and then the cipher suites and as I said any other directives which is necessary. So there must be a way now to be able to get this to work. There is 7 months left before there is no more support for the current default version. According to OpenSSL.org they state the following: [quote]Our previous LTS version (1.0.2 series) will continue to be supported until 31st December 2019 (security fixes only during the last year of support).
  This year is the last year of support!!

  0
• 

  cPanelLauren

  • April 30, 2019 20:54

  Hello @mommaroodle There is an open feature request here: Add Support for TLS 1.3 for this. I would encourage you to voice your concerns there and become a part of that discussion as well as vote on the feature. Thanks!

  0

Please sign in to leave a comment.