Question Best Practice for Upgrading OpenSSL on CentOS 7.9 - Obsidian v18.0.54

[hmob007]

Server operating system version

CentOS 7.9

Plesk version and microupdate number

Obsidian 18.0.54

I have searched a while and the articles about this are all dated a while ago and I've ended up with little clarity.

As I understand it, Plesk Obsidian 18.0.54 supports OpenSSL versions with TLS1.3, but there is no clarity if this support extends to installations on CentOS.

My current OpenSSL version is OpenSSL 1.0.2k-fips 26 Jan 2017 which is prior to the 1.1.1 update which allowed TLS1.3
My CentOS version is 7.9

The best direction I've been given is by ChatGPT but I want to confirm this is correct before I begin the process - namely:

1. Before updating, check your current version of OpenSSL:
openssl version

2. Update the system's package database:
yum update

3. Update OpenSSL:
yum install openssl

4. Check the OpenSSL version again to verify that it has been updated:
openssl version

5. After updating OpenSSL, it's essential to restart the services that depend on it:
service httpd restart
service nginx restart
service dovecot restart
service postfix restart
service courier-imap restart

6. Check if there are updates available for Plesk itself:
plesk installer update

QUESTION: Does this course of action look good or is it likely to fall apart with my current versions?

 

[Peter Debik]

I am not sure whether this can work for CentOS 7.9. Officially, Plesk only supports TLS 1.3 starting from RHEL 8 (e.g. Alma 8, Alma 9, Rocky 8), Debian 10, Ubuntu 18 and up. Simply upgrading the OpenSSL libraries might not work, because server software like Nginx must also be capable of using that standard. You should test this in a test environment first.

https://support.plesk.com/hc/en-us/articles/12377121719831-Does-Plesk-support-TLS-1-3-on-Linux-servers-

 

[IAR]

I have searched a while and the articles about this are all dated a while ago and I've ended up with little clarity.

Please share your final result, once you go ahead with it.