Question Support Post-quantum (PQC)?

[Franchino]

Server operating system version

Almalinux 9.7

Plesk version and microupdate number

18.0.77#2

Hi,

I have

Plesk 18.0.77#2
Almalinux 9.7
1.28.3-2.redhat.9+p18.0.77.2+t260415.1740
openssl 3.5.1-7.el9_7


When I run a test on SSL Labs I get this warning: This server does not support PQC (Post-Quantum Cryptography) key exchange.

Is there any way to enable it?
Does Plesk support it?

Thanks

 

[scsa20]

That's actually the limitation of OpenSSL and the Linux version. If you were on Debian 13 or AlmaLinux 10.1 then you would have the support needed natively. In your case you could get it to work although not natively supported by Plesk.

More info: Post-Quantum Cryptography (PQC) support in NGINX – NGINX Community Blog
Grok gave a pretty good outline for the process for adding the support: AlmaLinux PQC Support with Plesk | Shared Grok Conversation

 

[Franchino]

Hi,

Red Hat Enterprise Linux 10.2 and 9.8 are here: The intelligent evolution of enterprise Linux

Discover the latest updates in Red Hat Enterprise Linux 10.2 and 9.8, evolving the operating system (OS) from a foundation to a high-performance engine for critical applications, security, and innovation. Learn about enhanced AI assistance, streamlined operations with Image Mode, and...

www.redhat.com

Chapter 4. New features | 9.8 Release Notes | Red Hat Enterprise Linux | 9 | Red Hat Documentation

Chapter 4. New features | 9.8 Release Notes | Red Hat Enterprise Linux | 9 | Red Hat Documentation

docs.redhat.com

Addressing the quantum threat with Red Hat Certificate System 11.0​

The threat of quantum computers breaking today's cryptography is a very real strategic risk. Red Hat Certificate System 11.0, available alongside RHEL, helps address this challenge.

• Post-quantum cryptography (PQC): The new Certificate System integrates NIST-standardized ML-DSA signatures, positioning your Public Key Infrastructure (PKI) to meet emerging NIST standards (FIPS 204) for quantum-resistant algorithms. Adopting this now is a crucial defense against the “harvest now, decrypt later” strategy employed by bad actors.

Almalinux 9.8 and 10.2 coming soon

 

[Franchino]

Almalinux 9.8 and 10.2

General Availability of AlmaLinux OS 9.8 and 10.2 Stable!

AlmaLinux OS 9.8 and 10.2 Stable Now AvailableHello Community! The AlmaLinux OS Foundation is announcing the general availability of two stable releases at once: AlmaLinux OS 9.8 codenamed “Olive Jaguar” and AlmaLinux OS 10.2 codenamed “Lavender Lion”! This is the first time we have ever shipped...

almalinux.org

 

[Franchino]

@Sebahat.hadzhi

Plesk 18.0.78#3
Almalinux 9.8
NGINX 1.30.2-2.redhat.9+p18.0.78.2+t260526.1033
Openssl 3.5.5-2.el9_8

Is there any direct support for Post-quantum (PQC) from Plesk?

Thanks

 

[Sebahat.hadzhi]

@Franchino , not natively supported by Plesk. Plesk uses Nginx as the frontend to serve websites, which depends on OpenSSL for cryptography.