TLS variants in SUSE Linux Enterprise versions

This document (000021566) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Micro 6.x
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 11

Situation

This article provides an overview of the TLS version support of the gnutls, mozilla-nss and openSSL-* libraries in the SUSE Linux Enterprise Server (SLES) and SUSE Linux Enterprise Micro (SLE Micro) products.

Resolution

SLES 11

Package name	Upstream version	Available from-to SP	Max TLS version	Comments
openssl	0.9.8		TLS 1.0	Default openssl
openssl1	1.0.0	SLES 11 SP3 + Security Module	TLS 1.0	Some binaries in the "Security Module" are built with it.
mozilla-nss	3.68.1		TLS 1.2
gnutls	2.4.1		TLS 1.1	(Only has a non working draft implementation of TLS 1.2, default disabled)

SLES 12

Package name	Upstream version	Available from-to SP	Max TLS version	Comments
compat-openssl098	0.9.8	GA	TLS 1.0	Legacy Module only
openssl	1.0.2	GA-SP3	TLS 1.2	Default openssl. Starting with SLES 12 SP4 this is only a wrapper package
openssl-1_0_0	1.0.2	SP4	TLS 1.2	Default openssl
openssl-1_1	1.1.1?	SP4	TLS 1.3	Only some apps build with it : - apache2-tls1.3
gnutls	3.2.15	GA-SP2	TLS 1.2
gnutls	3.3.27	SP3-SP4	TLS 1.2
gnutls	3.3.27 3.4.17	SP5	TLS 1.2 TLS 1.3	We ship a newer libgnutls30 (in parallel)
mozilla-nss	3.101.1		TLS 1.3

SLES 15

Package name	Upstream version	Available from-to SP	Max TLS version	Comments
openssl-1_0_0	1.0.2	GA-SP6	TLS 1.2	Legacy Module only as SLE12 compatibility
openssl-1_1	1.1.0	GA-SP1	TLS 1.2
openssl-1_1	1.1.1	SP2-	TLS 1.3	Default openssl up to and including SP5
openssl-3	3.0.8	SP4-SP5	TLS 1.3
openssl-3	3.1.4	SP6-	TLS 1.3
gnutls	3.6.7	GA-SP3	TLS 1.3
gnutls	3.7.3	SP4-SP5	TLS 1.3
gnutls	3.8.3	SP6	TLS 1.3
mozilla-nss	3.101.1		TLS 1.3

SLE Micro 6.x

Package name	Upstream version	Max TLS version	Comments
openssl-3	3.1.4	TLS 1.3	Delfault openssl
gnutls	3.8.3	TLS 1.3
mozilla-nss	3.101.1	TLS 1.3

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.