This is a somewhat complicated test that involves using the PHP/cURL extension against libssl which has to be compiled against different SSL/TLS libraries. To make this easier I've written a small bash script to automate much of the compiling parts test (attached to this issue). Setup Server Create a virtual machine using this Debian ISO. It must be this one otherwise the bash script won't work. Set up your webserver stack (make sure you use Apache and PHP from apt-get though). However don't install the PHP/cURL extension. We're going to compile that. Place the attatched bash script in your home directory (or somewhere that you can write to) Install sudo - this guide seems OK Run ./install.sh init - it uses sudo so will prompt for your password If it worked it should have downloaded some sources and installed a few packages. If something goes wrong it should produce some sort of error Try running ./install.sh init again and make sure it says "No packages to install" Make a PHP file with phpinfo(); and put it in your webroot Access the PHP script and check that there is no mention of the cURL extension Run ./install.sh OpenSSL - it should compile the PHP/cURL extension, put it in the right place, and restart Apache for you Check the info script again, check that you can see the cURL extension Testing the different SSL/TLS libraries Clone the moodle integration branch and put it in your webroot At your virtual machine's terminal, run the install script: ./install.sh OpenSSL with_tls Check the info PHP file made earlier and ensure under "curl" you see that the SSL Version is "OpenSSL/1.0.1t" Go through the Moodle installation procedure but stop when it gets to the environment check Verify there is no mention of TLS libraries being out of date Run the install script again: ./install.sh GnuTLS Repeat steps 2-4 (check for "GnuTLS/3.3.8" under SSL Version) Verify there is no mention of TLS libraries being out of date Run the install script again: ./install.sh NSS Repeat steps 2-4 (check for "NSS/3.17.2 Basic ECC" under SSL Version) Verify there is no mention of TLS libraries being out of date Run the install script again: ./install.sh OpenSSL without_tls Repeat steps 2-4 (check for "OpenSSL/0.9.8o" under SSL Version) This time there should be a warning about TLS libraries being out of date