RE: [qmailtoaster] Centos 5 and PCRE

[CarlC Internet Services Service Desk]

 

 

From: Gary Bowling [mailto:g...@gbco.us] 



>Now the question is... how important is it to upgrade to Centos6 or Centos7?

I did it to get openssl-1.0.x and kill anything below TLS 1.1. CentOS 5 is 
limited to openssl-0.9.6 unless you do major surgery [maybe easier now but 
getting openssl-1.0.x was a hardship a few years ago for CentOS 5], you could 
not get TLS 1.1 or 1.2 on CentOS 5. I have had a few clients get hacked a few 
years ago due to SSLv2 [note: They were using free WiFi anywhere they could] 
when SSLv2 was first found to have issues.

Carl