I can probably answer my questions faster by downloading and trying a few lab installs. But for the sake of the PE list I am asking anyway.
Can this be installed on a TL7 or TL8 server and still operate when
the server is upgraded to TL9 or do users have to first patch to TL9 then
install or upgrade the puppet agent?
How is this support for TL9 implemented? Does the 3.2.1 PE installation change the system OpenSSL to a
compatible 0.9.8 release? Is PE shipping with its own libraries as with Redhat Enterprise Linux 4? Has some other solution been used (static linking, updated
packages, etc)?
Affecting the system OpenSSL invalidates the TL level, required for support and PowerHA (
https://www-304.ibm.com/support/docview.wss?uid=isg3T1012517). As a bonus this can break the ssh service when OpenSSL doesn't support your
OpenSSH anymore. Consult your console access documentation and your logged in co-workers before work
on either OpenSSL or OpenSSH services.