I am currently running a Debian Squeeze server with Apache. My OpenSSL version is 0.9.8, and I would like to get up to a version capable of running TLS v 1.2. So far my research shows that this is not possible, but I feel like I am missing something. Is there an upgrade path that would allow me to do this, or do I need to rebuild my server with a newer version of Debian?
Debian Squeeze comes with OpenSSL 0.9.8o, which only supports TLS 1.0.
I think your two options are:
- Get a backport of OpenSSL 1.0.1g or higher.
- Use GnuTLS instead of OpenSSL.
For the second option, see e.g. https://www.nnbfn.net/2011/05/tls-1-2-support-in-apache2/