pull down to refresh

Debian upstream had froze the openssl/libssl package to 1.1.1n. You are right that it is out of date, it's just Linux distributions like Debian deliberately don't roll releases.

https://packages.debian.org/search?keywords=libssl1.1

reply

It should be a nice contribution for tails, go for it.

reply

Maybe I will!

reply

How is OpenSSL used in Tails? What are some examples of how this effects end-users?

reply

For one, I need to use this version of OpenSSL if I want to use Tails in airgapped mode.

reply

Maybe I should use gpg instead of openssl for encrypting files anyway

reply

How? Was an outdated OpenSSL version installed at the time of build? Or am I misunderstanding something?

For example, on wikipedia, I can see that the LTS version of OpenSSL is indeed 1.1.1u from 2023-05-30:

https://imgprxy.stacker.news/nTsrB3Uqc9v98ZFGinw9xAUa6Uu85tbCUwH6XAjwiuc/rs:fit:600:500:0/g:no/aHR0cHM6Ly9pLnBvc3RpbWcuY2MvVmtkM0RKN0cvMjAyMy0wNy0zMC0xODI4NTctMjg3eDYwNC1zY3JvdC5wbmc

so maybe this is not outdated? But it says n in TailOS, not u. And it still shows the date from last year, not this year.

I am confused.

And maybe I should still use OpenSSL 3.1.1 instead of 1.1.1x?

reply