Update to OpenSSL 3.0

PureConnect 2023 R3 is incorporated with OpenSSL 3.0.8, which is a major update containing support for many security improvements as well as renewed FIPS certification. This version of OpenSSL 3.0, while addressing various vulnerabilities, also mandates a minimum version of Transport Layer Security (TLS) to be version 1.2 and previous versions (1.0 and 1.1) are no longer supported. CIC Server and all client instances need to be updated to use TLS v1.2 and update the certificates to SHA-256 before proceeding with the upgrading to PureConnect 2023 R3. Following topics give more information about the Prerequisites, Installation and Certificate Update.

Prerequisites for PureConnect 2023 R3 (OpenSSL 3.0)

Troubleshooting - Update Certificates with SHA256 Digest

Reference links:

New Cipher Suites

Digest Conversion from SHA1 to SHA256

Third-party Certificates