FR 3.0.26 and TLS 1.3

Alan DeKok aland at deployingradius.com
Mon Jan 23 15:27:00 UTC 2023


On Jan 23, 2023, at 9:18 AM, Chris Howley <C.P.Howley at leeds.ac.uk> wrote:
> I recently download the FR packages from your CentOS 7 repository, and I noticed that the 3.0.26 server was built with OpenSSL 1.0.2k (see below).

  So far as I know, that's the version of OpenSSL which is included with CentOS7.

> Should the server be built with OpenSSL 1.1.1 to support TLS 1.3?

  Not really.

  CentOS 7 was released in 2014.  That's a very long time ago.  I'd suggest upgrading to a more recent distribution.  Which will then include OpenSSL 3, and therefore also TLS 1.3.

  Alan DeKok.



More information about the Freeradius-Users mailing list