TLSv1.3 support in freeBSD 11.X

[Benjamin Kaduk]

On Thu, Jul 26, 2018 at 11:45:22AM +0000, PRAKASH RAI (prakrai) via freebsd-security wrote:
> Hi All,
> 
> I was going through the https://wiki.freebsd.org/OpenSSL and found that openssl 1.1.1 support is planned for freeBSD 12.
> As TLSv1.3 is based on openssl 1.1.1, does it mean that freeBSD 11.X would not be having support for TLSv1.3?
> 
> Basically I would like to understand if I can build openssl 1.1.1 (which is having support for TLSv1.3) with FreeBSD 11.2 without any issue and enable TLSv1.3 support?

The tools in the base system of FreeBSD 11.2 will not support TLS 1.3.  You
can of course build other (i.e., newer) software from the Ports Collection
or install from packages, as they become available; in that way it will be
possible to use TLS 1.3 from FreeBSD 11.2.

-Ben