<div dir="ltr">Please let me know if I am completely off. The version of openssl we are running is 0.9.8e-fips-rhel5 01 Jul 2008. So if we want version TLS1.1+ then we need to recompile the STUNNEL src with an updated version of openssl we are running on our server. Something higher than 0.9.8. Is that right ? Is it possible to find a version that was already compiled with a higher version of openssl ? </div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Apr 12, 2017 at 5:49 PM, Rob Lockhart <span dir="ltr"><<a href="mailto:rlockhar@gmail.com" target="_blank">rlockhar@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="color:rgb(11,83,148)"><br></div><div class="gmail_extra"><br><div class="gmail_quote"><span class="">On Wed, Apr 12, 2017 at 5:22 PM, Kenway Ng <span dir="ltr"><<a href="mailto:kenwayng@gmail.com" target="_blank">kenwayng@gmail.com</a>></span> wrote:<br></span><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><span class=""><div><br></div><div>I am trying to upgrade our version of stunnel. Our SME left and now I am trying to upgrade stunnel to fix a vulnerability . I am being told to use TLS1.1 or higher</div><div><br></div></span><span class=""><div><span style="font-size:12.8px">$ ./stunnel -version</span><br></div><div><p class="MsoNormal" style="font-size:12.8px"><u></u></p><p class="MsoNormal" style="font-size:12.8px">stunnel 4.15 on x86_64-redhat-linux-gnu with OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008<u></u><u></u></p><p class="MsoNormal" style="font-size:12.8px">Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP<u></u><u></u></p><p class="MsoNormal" style="font-size:12.8px"><u></u> </p></div></span></div></blockquote><div><br></div><div><div class="gmail_default" style="color:rgb(11,83,148)">I don't have RHEL5 64-bit but these links may help:</div><div class="gmail_default" style="color:rgb(11,83,148)"><br></div><div class="gmail_default"><a href="https://miteshshah.github.io/linux/centos/how-to-enable-openssl-1-0-2-a-tlsv1-1-and-tlsv1-2-on-centos-5-and-rhel5/" target="_blank"><font color="#0b5394">https://miteshshah.github.io/<wbr>linux/centos/how-to-enable-<wbr>openssl-1-0-2-a-tlsv1-1-and-<wbr>tlsv1-2-on-centos-5-and-rhel5/</font><br></a></div><div class="gmail_default"><font color="#0b5394"><br></font></div><div class="gmail_default" style="color:rgb(11,83,148)"><a href="http://serverfault.com/questions/296765/cannot-find-ssl-libraries-when-configuring-stunnel" target="_blank">http://serverfault.com/<wbr>questions/296765/cannot-find-<wbr>ssl-libraries-when-<wbr>configuring-stunnel</a></div><br></div><div><div class="gmail_default" style="color:rgb(11,83,148)">These links involve re-compiling OpenSSL and Stunnel, in that order. I would opt for OpenSSL 1.0.2k (latest as of 20170412) since 1.0.1 and below are all EOL as of 12/31/2016. OpenSSL 0.9.8 supports only TLS v1.0, whereas OpenSSL 1.0.1 supports TLS v1.0, v1.1 and v1.2. </div><span class="HOEnZb"><font color="#888888"><div class="gmail_default" style="color:rgb(11,83,148)"><br></div><div class="gmail_default" style="color:rgb(11,83,148)"> -Rob</div></font></span></div></div></div></div>
</blockquote></div><br></div>