title: Is it possible to run TLSv1.2 on old Apache and Debian version
body: <p>After some really extensive search, i am not able to find out if it is even possible to run TLSv1.2 on the following configuration:</p>
  <ul>
  <li>Debian GNU/Linux 4.0 (32bit)</li>
  <li>Apache/1.3.34 (Debian)</li>
  <li>OpenSSL 0.9.8zf</li>
  </ul>
  <p>We are hosting a really old application with critical importance which has been setup many years ago by employees which are no longer in the company. So, we are kind of stuck in the current situation.</p>
  <p>As mentioned above, the OS is Debian GNU/Linux 4.0 with apache 1.3.34. The openssl version is 0.9.8zf. I know that OpenSSL of at least 1.0.1 is required to run TLSv1.2, which we can install. But apache is already really old and it is compiled with libssl.so.0.9.8.</p>
  <p>Do we need to upgrade apache? If yes, what is the minimum version required (could not find an answer on this online). Can we compile apache 1.3.34 with openssl 1.0.1?</p>
  <p>I know that everything is already ancient, but at the moment we cannot just migrate the application to a more recent setup. We just need a way if possible to run TLS1.2 with the least amount of changes.</p>
  <ul>
  <li><code>openssl version</code> - OpenSSL 0.9.8zf 19 Mar 2015</li>
  <li><code>apache -v</code> - Apache/1.3.34 (Debian)</li>
  <li><code>cat /etc/issue</code> - Debian GNU/Linux 4.0</li>
  <li><code>ldd mod_ssl.so</code> - libssl.so.0.9.8</li>
  </ul>
  <p>Thanks.</p>