# openSSL 3 support in ConfD

**URL:** <https://dmap-community.ductus.global/t/openssl-3-support-in-confd/4572>\
**Category:** General\
**Created:** [November 20, 2023, 7:59am UTC](https://dmap-community.ductus.global/t/openssl-3-support-in-confd/4572 "2023-11-20T07:59:57Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![yhevrony](https://avatars.discourse-cdn.com/v4/letter/y/6bbea6/32.png) [@yhevrony](https://dmap-community.ductus.global/u/yhevrony)\
**Post date:** [November 20, 2023, 7:59am UTC](https://dmap-community.ductus.global/t/openssl-3-support-in-confd/4572/1 "2023-11-20T07:59:58Z")

</div>

Hi,

I know this question was asked before, but this is becoming critical.  
We needed to forcefully use openssl 1.1 in debian Bookworm that does not ship with it.  
Also, openssl 1.1 has no support and no security fixes anymore.  
When can we expect to have confd support it?

Thanks

---

<div class="post-metadata">

**Author:** ![josephm](https://avatars.discourse-cdn.com/v4/letter/j/a88e57/32.png) [@josephm](https://dmap-community.ductus.global/u/josephm)\
**Post date:** [November 20, 2023, 9:48am UTC](https://dmap-community.ductus.global/t/openssl-3-support-in-confd/4572/2 "2023-11-20T09:48:49Z")

</div>

> [@End-of-life for OpenSSL](http://dmap-community.ductus.global/t/end-of-life-for-openssl/4524/3):
>
> ConfD 8.0.x is the last branch of ConfD which is being released. There are no plans to release OpenSSL 3.0 support for ConfD.

---

<div class="post-metadata">

**Author:** ![yhevrony](https://avatars.discourse-cdn.com/v4/letter/y/6bbea6/32.png) [@yhevrony](https://dmap-community.ductus.global/u/yhevrony)\
**Post date:** [November 20, 2023, 10:08am UTC](https://dmap-community.ductus.global/t/openssl-3-support-in-confd/4572/3 "2023-11-20T10:08:20Z")

</div>

HI,

Does the issue relates to confd/confd-server itself, or libconfd?  
We are already generating crypto.so base on that, not taking the built in crypto.so.  
We have the sources of libconfd, can we support it by modifying the sources, or it is inside confd-server?

Thanks

---

<div class="post-metadata">

**Author:** ![josephm](https://avatars.discourse-cdn.com/v4/letter/j/a88e57/32.png) [@josephm](https://dmap-community.ductus.global/u/josephm)\
**Post date:** [November 20, 2023, 6:04pm UTC](https://dmap-community.ductus.global/t/openssl-3-support-in-confd/4572/4 "2023-11-20T18:04:23Z")

</div>

correct, ConfD daemon itself would need to be updated to allow proper openssl 3 support