--- title: Running OpenSSL 1.1.1 after EOL? Stay secure with Ubuntu Pro. description: Ubuntu Pro gets important security fixes and support for OpenSSL 1.1.1 for at least 10 years, long after the official upstream EOL. url: https://canonical.com/blog/running-openssl-1-1-1-after-eol-with-ubuntu-pro?format=md --- 1. [Blog](https://canonical.com/blog) 2. Article --- [Lech Sandecki](https://canonical.com/blog/author/lsandecki "More about Lech Sandecki") 26 October 2023 # Running OpenSSL 1.1.1 after EOL? Stay secure with Ubuntu Pro. [18.04 LTS](https://canonical.com/blog/tag/18-04-lts) [20.04 LTS](https://canonical.com/blog/tag/20-04-lts) [Compliance](https://canonical.com/blog/tag/compliance) [OpenSSL](https://canonical.com/blog/tag/openssl) [Security](https://canonical.com/blog/tag/security) [Support](https://canonical.com/blog/tag/support) [Ubuntu Pro](https://canonical.com/blog/tag/ubuntu-pro) --- Share the article A few months ago, the OpenSSL Project announced the [end of life of OpenSSL 1.1.1](https://www.openssl.org/blog/blog/2023/09/11/eol-111/). It is used by thousands of software components included in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS, with many organisations relying on version 1.1.1. Rest assured that the Ubuntu security team will continue to maintain important security fixes in OpenSSL 1.1.1 for as long as [the Ubuntu release is supported](https://ubuntu.com/about/release-cycle), meaning 2025 for Ubuntu 20.04 LTS with standard support. For [Ubuntu Pro subscribers](https://ubuntu.com/pro), Canonical offers Expanded Security Maintenance (ESM). This means getting at least 10 years of security maintenance for all software [bundled in the release](https://launchpad.net/ubuntu), including OpenSSL 1.1.1. This translates to being security maintained and supported until at least 2028 for Ubuntu 18.04 LTS and at least 2030 for Ubuntu 20.04 LTS. You might be surprised, but this security maintenance and support level for an end-of-life OpenSSL version isn’t unprecedented. Since OpenSSL 1.0.1 and OpenSSL 1.0.2 went end of life in 2016 and 2019, respectively, Ubuntu Pro customers on Ubuntu 14.04 LTS and Ubuntu 16.04 LTS have [already received many additional CVE fixes](https://ubuntu.com/security/notices?order=newest&release=&details=openssl), ensuring a secure and stable environment for their production and mission-critical deployments. ## Backporting and testing Maintaining this level of support is no easy feat. As with most of the software bundled with Ubuntu, the Ubuntu security team cannot simply update to the latest release of OpenSSL. OpenSSL 3.0 is not backwards-compatible with previous releases, and many thousands of packages included with Ubuntu would need to be modified to work with it. Instead, the security team must take each security fix published by the OpenSSL developers and carefully adapt it to work with the older version of OpenSSL. Sometimes, the effort required for this step is trivial, but more often than not, it requires rework and adaptation. Once that is done, the next step is to extensively test the update to ensure that it fixes the security issue properly and does not cause any regression to our customers and their infrastructure. ## Additional security and compliance features Ubuntu Pro is much more than OpenSSL security support. This same consistent promise applies to every software package bundled with Ubuntu, many of which are no longer supported by their upstream community. The list includes over 25,000 packages in the Ubuntu Universe repository, including Redis and Python 2.7. For customers who need to [comply with NIST, HIPAA, PCI-DSS and other compliance regimes](https://ubuntu.com/security/certifications), Ubuntu Pro also provides streamlined hardening and audit, FIPS compliance, management at scale, kernel livepatch, and optional 24/7 support. Stay secure and compliant. Learn more at [ubuntu.com/pro](http://ubuntu.com/pro). For a cost-effective, compliant and supported open source stack – try Ubuntu Pro. [Get your first month free!](https://ubuntu.com/pro/subscribe) [Get in touch Interested in running Ubuntu in your organization?](https://ubuntu.com/about/contact-us/form) ## Sign up for our newsletter Get the latest Canonical news and updates in your inbox. Work email: \*I agree to receive information about Canonical's products and services. By submitting this form, I confirm that I have read and agree to [Canonical's Privacy Policy](https://canonical.com/legal/dataprivacy). Sign up ## Share on --- ## Related posts [### Tracing a memory leak bug in PID 1 and contributing an upstream fix: a Linux support story](https://canonical.com/blog/fixing-memory-bug) How Canonical Support helped a global retail organization trace the cause for an unusual memory leak originating in PID 1. By investigating the issue across three separate... [Lidia Luna Puerta](https://canonical.com/blog/author/lidia-luna) 17 July 2026 [### Canonical joins the Open Secure AI Alliance](https://canonical.com/blog/open-secure-ai-alliance) Canonical is now part of the Open Secure AI Alliance, announced by NVIDIA with partners across cloud computing, cybersecurity, enterprise software, open source foundations, and... [Canonical](https://canonical.com/blog/author/canonical) 28 August 2026 [### Arduino® VENTUNO™ Q is available for pre-order with Ubuntu pre-installed](https://canonical.com/blog/arduino-ventuno-q-is-available-for-pre-order-with-ubuntu-pre-installed) London, UK – August 25, 2026 – Following our initial collaboration announcement in March 2026, Canonical and Arduino (a subsidiary of Qualcomm Technologies, Inc.) are excited... [Canonical](https://canonical.com/blog/author/canonical) 25 August 2026 [### Canonical announces the Enterprise Store as part of Ubuntu Pro](https://canonical.com/blog/canonical-announces-the-enterprise-store) Canonical introduces a new way to manage software behind firewalls and in air-gapped environments with the Enterprise Store. The Enterprise Store makes software distribution... [Holly Hall](https://canonical.com/blog/author/hollyhall) 21 July 2026