I have been running a production server with Ubuntu 18 installed. Recently, I found that my web application was not allowed on some of the firewalls installed at the customer location.
I found that my server is communicating at TLSv1.0, TLSv1.1, TLSv1.2
protocols, I assume that the firewall setting is allowing communication with the server on TLSv1.3
protocol only.
As Ubuntu 18 is shipped with OpenSSL version 1.1.0
, and to make server support TLS v1.3
I have to upgrade OpenSSL to version 1.1.1
which is the latest one.
As this is a production server running nginx
server, I don't want to directly try anything on the server.
root@energy-prod:~# nginx -v
nginx version: nginx/1.14.0 (Ubuntu)
What is the best way to upgrade OpenSSL to v1.1.1 without disturbing any other settings of the server?