OpenSSL

No entries match these filters. Clear filters

1. openssl-4.1.0 Oct 23, 2026 · issue 119

   OpenSSL 4.1.0 adds DTLS 1.3DTLS 1.3A UDP-based variant of TLS 1.3, standardized by the IETF, that adds record-layer sequencing and retransmission to handle packet loss, giving tools encrypted low-latency channels without TCP overhead., GREASEGREASEA TLS extension mechanism (RFC 8701) maintained by the IETF that injects reserved dummy values into handshakes to keep implementations from rejecting unknown extensions, ensuring future protocol additions deploy cleanly., IKEV2 KDFIKEV2 KDFThe key derivation function specified in IKEv2 (RFC 7296), used to stretch shared secrets into keying material for IPsec tunnels, giving cyber tools a standard way to generate session keys during VPN negotiation., DTLS listener API support, and post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. crypto performance boosts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch openssl-4.1.0 https://github.com/openssl/openssl.git
   # already have the repo? check out this version:
   $ git checkout openssl-4.1.0

   • Adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 support per RFC 9147RFC 9147An IETF standard specifying DTLS 1.3, the datagram transport variant of TLS 1.3, giving tools encrypted, low-latency communication over UDP without the overhead of a TCP connection., documented in the ossl-guide-dtlsv13(7) manual page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds no-ecdsa and no-ecdh removal from Configure — use no-ec to disable elliptic curve support.
   • Adds RFC 8701RFC 8701An IETF specification that reserves specific TLS and QUIC extension values as "GREASE" placeholders, letting implementations send random reserved values to ensure peers tolerate unknown extensions without breaking. GREASE (Generate Random Extensions And Sustain Extensibility) support.
   • Adds optimized ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. and ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. NTT operations on ppc64le; optimized ML-DSA operations on x86_64 including AVX-512-optimized SHAKE x4 for ML-DSA and AVX-512/VAES optimizations for AES-CBC decryption.
   • Adds initial support for the Elbrus2000 (e2k) architecture.

   +1 more show less

   • Adds VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets for MSVC 2013 C99 bridging support.
   • Adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 support per RFC 9147RFC 9147An IETF standard specifying DTLS 1.3, the datagram transport variant of TLS 1.3, giving tools encrypted, low-latency communication over UDP without the overhead of a TCP connection., documented in the ossl-guide-dtlsv13(7) manual page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds RFC 8701RFC 8701An IETF specification that reserves specific TLS and QUIC extension values as "GREASE" placeholders, letting implementations send random reserved values to ensure peers tolerate unknown extensions without breaking. GREASE (Generate Random Extensions And Sustain Extensibility) support.
   • Adds initial support for the Elbrus2000 (e2k) architecture.
   • Adds VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets for MSVC 2013 C99 bridging support.

   2 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The no-ecdsa and no-ecdh Configure options are removed; use no-ec to disable elliptic curve support.
   • !The tsget utility now requires Net::Curl::Easy (from the Net-Curl CPANCPANThe Comprehensive Perl Archive Network, a public repository of reusable Perl modules maintained by the Perl community, giving cyber tools instant access to thousands of tested libraries without reinventing common functionality. distribution) instead of the abandoned WWW::Curl::Easy — install it before upgrading.
   • !The VC-WIN64I (Windows-on-Itanium) and VC-CE (Windows CE) build targets are dropped from Configurations.
2. openssl-4.1.0 Oct 23, 2026 · issue 018

   OpenSSL 4.1.0 adds DTLS 1.3DTLS 1.3A UDP-based variant of TLS 1.3, standardized by the IETF, that adds record-layer sequencing and retransmission to handle packet loss, giving tools encrypted low-latency channels without TCP overhead., GREASEGREASEA TLS extension mechanism (RFC 8701) maintained by the IETF that injects reserved dummy values into handshakes to keep implementations from rejecting unknown extensions, ensuring future protocol additions deploy cleanly., IKEV2 KDFIKEV2 KDFThe key derivation function specified in IKEv2 (RFC 7296), used to stretch shared secrets into keying material for IPsec tunnels, giving cyber tools a standard way to generate session keys during VPN negotiation., DTLS listener API support, and post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. crypto performance boosts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch openssl-4.1.0 https://github.com/openssl/openssl.git
   # already have the repo? check out this version:
   $ git checkout openssl-4.1.0

   • Adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 support per RFC 9147RFC 9147An IETF standard specifying DTLS 1.3, the datagram transport variant of TLS 1.3, giving tools encrypted, low-latency communication over UDP without the overhead of a TCP connection., documented in the ossl-guide-dtlsv13(7) manual page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds no-ecdsa and no-ecdh removal from Configure — use no-ec to disable elliptic curve support.
   • Adds RFC 8701RFC 8701An IETF specification that reserves specific TLS and QUIC extension values as "GREASE" placeholders, letting implementations send random reserved values to ensure peers tolerate unknown extensions without breaking. GREASE (Generate Random Extensions And Sustain Extensibility) support.
   • Adds optimized ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. and ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. NTT operations on ppc64le; optimized ML-DSA operations on x86_64 including AVX-512-optimized SHAKE x4 for ML-DSA and AVX-512/VAES optimizations for AES-CBC decryption.
   • Adds initial support for the Elbrus2000 (e2k) architecture.

   +1 more show less

   • Adds VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets for MSVC 2013 C99 bridging support.
   • Adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 support per RFC 9147RFC 9147An IETF standard specifying DTLS 1.3, the datagram transport variant of TLS 1.3, giving tools encrypted, low-latency communication over UDP without the overhead of a TCP connection., documented in the ossl-guide-dtlsv13(7) manual page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds RFC 8701RFC 8701An IETF specification that reserves specific TLS and QUIC extension values as "GREASE" placeholders, letting implementations send random reserved values to ensure peers tolerate unknown extensions without breaking. GREASE (Generate Random Extensions And Sustain Extensibility) support.
   • Adds initial support for the Elbrus2000 (e2k) architecture.
   • Adds VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets for MSVC 2013 C99 bridging support.

   2 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The no-ecdsa and no-ecdh Configure options are removed; use no-ec to disable elliptic curve support.
   • !The tsget utility now requires Net::Curl::Easy (from the Net-Curl CPANCPANThe Comprehensive Perl Archive Network, a public repository of reusable Perl modules maintained by the Perl community, giving cyber tools instant access to thousands of tested libraries without reinventing common functionality. distribution) instead of the abandoned WWW::Curl::Easy — install it before upgrading.
   • !The VC-WIN64I (Windows-on-Itanium) and VC-CE (Windows CE) build targets are dropped from Configurations.
3. announced Oct 23, 2026 · issue 130

   OpenSSL 4.1 adds DTLS 1.3DTLS 1.3A UDP-based variant of TLS 1.3, standardized by the IETF, that adds record-layer sequencing and retransmission to handle packet loss, giving tools encrypted low-latency channels without TCP overhead., RFC 8701RFC 8701An IETF specification that reserves specific TLS and QUIC extension values as "GREASE" placeholders, letting implementations send random reserved values to ensure peers tolerate unknown extensions without breaking. GREASEGREASEA TLS extension mechanism (RFC 8701) maintained by the IETF that injects reserved dummy values into handshakes to keep implementations from rejecting unknown extensions, ensuring future protocol additions deploy cleanly. support, DTLS in the SSL listener API, and IKEV2 KDFIKEV2 KDFThe key derivation function specified in IKEv2 (RFC 7296), used to stretch shared secrets into keying material for IPsec tunnels, giving cyber tools a standard way to generate session keys during VPN negotiation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • OpenSSL now supports DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 (RFC 9147RFC 9147An IETF standard specifying DTLS 1.3, the datagram transport variant of TLS 1.3, giving tools encrypted, low-latency communication over UDP without the overhead of a TCP connection.), documented in the ossl-guide-dtlsv13(7) manual page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • OpenSSL now supports RFC 8701 GREASE (Generate Random Extensions And Sustain Extensibility) in TLS.
   • OpenSSL now includes DTLS support in the SSL listener API.
   • OpenSSL now supports the IKEV2 KDF.
   • OpenSSL now adds optimized ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. and ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. NTT operations on ppc64le, optimized ML-DSA operations on x86_64, AVX-512-optimized SHAKE x4 for ML-DSA on x86_64, and AVX-512 and VAES optimizations for AES-CBC decryption on x86_64.

   +2 more show less

   • OpenSSL now adds initial support for the Elbrus2000 (e2k) architecture.
   • OpenSSL now adds VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets to bridge C99 standard gaps in MSVC 2013.
   • OpenSSL now supports DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 (RFC 9147RFC 9147An IETF standard specifying DTLS 1.3, the datagram transport variant of TLS 1.3, giving tools encrypted, low-latency communication over UDP without the overhead of a TCP connection.), documented in the ossl-guide-dtlsv13(7) manual page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • OpenSSL now supports RFC 8701 GREASE (Generate Random Extensions And Sustain Extensibility) in TLS.
   • OpenSSL now includes DTLS support in the SSL listener API.
   • OpenSSL now supports the IKEV2 KDF.
   • OpenSSL now adds initial support for the Elbrus2000 (e2k) architecture.

   +1 more show less

   • OpenSSL now adds VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets to bridge C99 standard gaps in MSVC 2013.

   1 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The tsget utility now uses Net::Curl::Easy (from the Net-Curl CPANCPANThe Comprehensive Perl Archive Network, a public repository of reusable Perl modules maintained by the Perl community, giving cyber tools instant access to thousands of tested libraries without reinventing common functionality. distribution) instead of the abandoned WWW::Curl::Easy; users must install Net::Curl::Easy before upgrading.
   • !The VC-WIN64I (Windows-on-Itanium) and VC-CE (Windows CE) build targets are removed from Configurations.
   • !The no-ecdsa and no-ecdh options are removed from Configure; use no-ec to disable elliptic curve support.
4. docs update Sep 29, 2026 · issue 089

   OpenSSL FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. provider exposes fips-indicator gettable context parameter to signal per-operation approval status at runtime.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Exposes fips-indicator as a gettable context parameter on every algorithm implementation advertised by the OpenSSL FIPS provider, returning 1 when the operation is approved and 0 when unapproved.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. Key Encapsulation marks an operation unapproved when the test-only ikme parameter is supplied.
   • ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. and SLH-DSASLH-DSANIST's hash-based post-quantum signature standard (FIPS 205), formerly SPHINCS+. Its security rests only on hash functions, so it is slower and larger than ML-DSA but a conservative backup. Signature operations are marked unapproved when test entropy is supplied or when ML-DSA disables standard message encoding.
   • RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. Key Generation marks an operation unapproved when parameters reserved for FIPS module testing are supplied.
   • AES-GCMAES-GCMAES encryption in Galois/Counter Mode, which encrypts data and detects tampering in one pass. It is the default cipher for TLS and most disk and cloud encryption. fips-indicator returns 0 after encryption with an externally supplied IV, and for GCM tag lengths other than 4, 8, or 12 through 16 bytes.

   +2 more show less

   • Signature fips-indicator returns 0 when verification is performed directly on a caller-supplied digest.
   • X448MLKEM1024 Key Generation and Key Encapsulation are unapproved; sibling hybrids X25519MLKEM768, SecP256r1MLKEM768, and SecP384r1MLKEM1024 remain approved.
   • Exposes fips-indicator as a gettable context parameter on every algorithm implementation advertised by the OpenSSL FIPS provider, returning 1 when the operation is approved and 0 when unapproved.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • X448MLKEM1024 Key Generation and Key Encapsulation are unapproved; sibling hybrids X25519MLKEM768, SecP256r1MLKEM768, and SecP384r1MLKEM1024 remain approved.

   5 more in Everything

5. docs update Sep 24, 2026 · issue 084

   OpenSSL adds new PKCS12PKCS12A file format standard from RSA Labs, now maintained under IETF, that bundles a private key, certificate, and chain into one encrypted container, letting cyber tools ship or load credentials as a single portable file. parsing context API with granular control over certs, keys, and secret bags⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds PKCS12_PARSE_CTX_new and PKCS12_PARSE_CTX_free for lifecycle management of a new PKCS12 parsing context object.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds PKCS12_parse_ex for parsing PKCS12 structures using the new context-based API.
   • Adds PKCS12_decrypt_secretbag for decrypting PKCS12 secret bag contents.

   3 details in Everything

6. announced Sep 23, 2026 · issue 085

   OpenSSL 4.1 Beta adds DTLS 1.3DTLS 1.3A UDP-based variant of TLS 1.3, standardized by the IETF, that adds record-layer sequencing and retransmission to handle packet loss, giving tools encrypted low-latency channels without TCP overhead., RFC 8701RFC 8701An IETF specification that reserves specific TLS and QUIC extension values as "GREASE" placeholders, letting implementations send random reserved values to ensure peers tolerate unknown extensions without breaking. GREASEGREASEA TLS extension mechanism (RFC 8701) maintained by the IETF that injects reserved dummy values into handshakes to keep implementations from rejecting unknown extensions, ensuring future protocol additions deploy cleanly., IKEV2 KDFIKEV2 KDFThe key derivation function specified in IKEv2 (RFC 7296), used to stretch shared secrets into keying material for IPsec tunnels, giving cyber tools a standard way to generate session keys during VPN negotiation., and ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code./ML-KEM hardware optimizations⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Drops no-ecdsa and no-ecdh options from Configure; use no-ec instead to disable elliptic curve support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 support (RFC 9147RFC 9147An IETF standard specifying DTLS 1.3, the datagram transport variant of TLS 1.3, giving tools encrypted, low-latency communication over UDP without the overhead of a TCP connection.); see the ossl-guide-dtlsv13(7) manual page for usage details.
   • Adds DTLS support in the SSL listener API.
   • Adds support for RFC 8701 GREASE (Generate Random Extensions And Sustain Extensibility).
   • Adds support for IKEV2 KDF.

   +4 more show less

   • Adds VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets for C99 bridging on MSVC 2013.
   • Adds optimized ML-DSA and ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. NTT operations on ppc64le; optimized ML-DSA operations on s390x and x86_64; AVX-512-optimized SHAKE x4 for ML-DSA on x86_64; AVX-512 and VAES optimizations for AES-CBC decryption on x86_64.
   • Adds initial support for the Elbrus2000 (e2k) architecture.
   • Changes tsget utility to use Net::Curl::Easy (Net-Curl CPANCPANThe Comprehensive Perl Archive Network, a public repository of reusable Perl modules maintained by the Perl community, giving cyber tools instant access to thousands of tested libraries without reinventing common functionality. distribution) instead of the abandoned WWW::Curl::Easy.
   • Drops no-ecdsa and no-ecdh options from Configure; use no-ec instead to disable elliptic curve support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 support (RFC 9147RFC 9147An IETF standard specifying DTLS 1.3, the datagram transport variant of TLS 1.3, giving tools encrypted, low-latency communication over UDP without the overhead of a TCP connection.); see the ossl-guide-dtlsv13(7) manual page for usage details.
   • Adds DTLS support in the SSL listener API.
   • Adds support for RFC 8701 GREASE (Generate Random Extensions And Sustain Extensibility).
   • Adds support for IKEV2 KDF.

   +2 more show less

   • Adds VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets for C99 bridging on MSVC 2013.
   • Adds initial support for the Elbrus2000 (e2k) architecture.

   2 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The no-ecdsa and no-ecdh options are removed from Configure; scripts or build systems using them will break — use no-ec instead.
   • !The VC-WIN64I (Windows-on-Itanium) and VC-CE (Windows CE) build targets are removed from Configurations.
   • !tsget now requires Net::Curl::Easy (Net-Curl CPAN distribution); the previously used WWW::Curl::Easy is no longer supported — install Net::Curl::Easy before upgrading.
7. docs update Sep 22, 2026 · issue 082

   OpenSSL adds Ascon-AEAD128Ascon-AEAD128A lightweight authenticated encryption scheme standardized by NIST in 2023, offering confidentiality and integrity in constrained environments; cyber tools use it for efficient, tamper-evident encryption on low-power or embedded targets. lightweight authenticated encryption via the EVP_CIPHER interface.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

8. docs update Sep 11, 2026 · issue 071

   OpenSSL gains new EVP_SKEY, IPAddrBlocksIPAddrBlocksAn X.509v3 certificate extension, defined in RFC 3779, that encodes a list of IP address prefixes the certificate holder is authorized to use, enabling route-origin validation in RPKI., and X.509X.509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. extension config APIs in master docs⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds EVP_SKEY_get0_algorithm_id and EVP_SKEY_get0_local_keyid functions to retrieve algorithm ID and local key ID from an EVP_SKEY object.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds IPAddrBlocks_new, IPAddrBlocks_free, IPAddrBlocks_it, d2i_IPAddrBlocks, and i2d_IPAddrBlocks functions for creating, freeing, and DER-encoding/decoding IP address block extensions (RFC 3779RFC 3779An IETF standard that adds IP address and AS number extensions to X.509 certificates, letting systems cryptographically prove they hold the right to originate specific address blocks — the basis of RPKI.).
   • Adds X509V3_EXT_nconf and X509V3_EXT_nconf_nid functions to create X.509 certificate extensions driven by OpenSSL configuration.

   3 details in Everything

9. docs update Sep 9, 2026 · issue 069

   OpenSSL adds EVP_SKEY_get0_algorithm_id and EVP_SKEY_get0_local_keyid to the symmetric key API

   • Adds EVP_SKEY_get0_algorithm_id function to retrieve the algorithm identifier from a symmetric key object.
   • Adds EVP_SKEY_get0_local_keyid function to retrieve the local key ID from a symmetric key object.

   2 details in Everything

10. announced Sep 9, 2026 · issue 070

    OpenSSL 4.1 Alpha adds DTLS 1.3DTLS 1.3A UDP-based variant of TLS 1.3, standardized by the IETF, that adds record-layer sequencing and retransmission to handle packet loss, giving tools encrypted low-latency channels without TCP overhead., RFC 8701RFC 8701An IETF specification that reserves specific TLS and QUIC extension values as "GREASE" placeholders, letting implementations send random reserved values to ensure peers tolerate unknown extensions without breaking. GREASEGREASEA TLS extension mechanism (RFC 8701) maintained by the IETF that injects reserved dummy values into handshakes to keep implementations from rejecting unknown extensions, ensuring future protocol additions deploy cleanly., DTLS listener API, IKEv2 KDFIKEv2 KDFThe key derivation function specified in IKEv2 (RFC 7296), used to stretch shared secrets into keying material for IPsec tunnels, giving cyber tools a standard way to generate session keys during VPN negotiation., and Elbrus2000 architecture support⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    └──▷ TRY IT
    Consult the new DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 guide to understand how to establish DTLS 1.3 connections using the updated API.
    copy

    $ man ossl-guide-dtlsv13

    • Adds support for DTLS 1.3 (RFC 9147RFC 9147An IETF standard specifying DTLS 1.3, the datagram transport variant of TLS 1.3, giving tools encrypted, low-latency communication over UDP without the overhead of a TCP connection.), documented in the ossl-guide-dtlsv13(7) manual page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds support for RFC 8701 GREASE (Generate Random Extensions And Sustain Extensibility) in TLS.
    • Adds initial support for the Elbrus2000 (e2k) architecture.
    • Adds VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets to bridge C99 support gaps in MSVC 2013.
    • Adds AVX-512-optimized SHAKE x4 operations for ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. on x86_64, AVX-512 and VAES optimizations for AES-CBC decryption on x86_64, optimized ML-DSA and ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake. NTT operations on ppc64le, and optimized ML-DSA operations on s390x and x86_64.
    • Adds support for DTLS 1.3 (RFC 9147RFC 9147An IETF standard specifying DTLS 1.3, the datagram transport variant of TLS 1.3, giving tools encrypted, low-latency communication over UDP without the overhead of a TCP connection.), documented in the ossl-guide-dtlsv13(7) manual page.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds support for RFC 8701 GREASE (Generate Random Extensions And Sustain Extensibility) in TLS.
    • Adds initial support for the Elbrus2000 (e2k) architecture.
    • Adds VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets to bridge C99 support gaps in MSVC 2013.

    1 more in Everything

    └──▷ BREAKING ON UPGRADE

    • !The tsget utility now requires Net::Curl::Easy (from the Net-Curl CPANCPANThe Comprehensive Perl Archive Network, a public repository of reusable Perl modules maintained by the Perl community, giving cyber tools instant access to thousands of tested libraries without reinventing common functionality. distribution) instead of the abandoned WWW::Curl::Easy — install Net::Curl::Easy before upgrading.
    • !Windows-on-Itanium (VC-WIN64I) and Windows CE (VC-CE) build targets have been removed from Configurations.
    • !The no-ecdsa and no-ecdh options have been removed from Configure; use no-ec to disable elliptic curve support.
11. announced Sep 9, 2026 · issue 070

    OpenSSL 4.1 adds DTLS 1.3DTLS 1.3A UDP-based variant of TLS 1.3, standardized by the IETF, that adds record-layer sequencing and retransmission to handle packet loss, giving tools encrypted low-latency channels without TCP overhead. support, including PQCPQCCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. algorithms, faster handshakes, and SSL_new_listener() for DTLS⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 protocol support in OpenSSL 4.1, with fewer handshake round trips and removal of outdated cryptographic algorithms compared to DTLS 1.2.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Extends SSL_new_listener() to support DTLS, enabling DTLS 1.3 listener workflows (note: DTLSv1_listen() does not support DTLS 1.3).
    • Enables Post-Quantum CryptographyPost-Quantum CryptographyCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. (PQC) algorithm support over DTLS 1.3, building on the PQC foundation introduced in OpenSSL 3.5.
    • Ships two reference demos — demos/dtlsecho and demos/dtlslistenerecho — illustrating DTLS 1.3 client/server usage.
    • Adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 protocol support in OpenSSL 4.1, with fewer handshake round trips and removal of outdated cryptographic algorithms compared to DTLS 1.2.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Enables Post-Quantum CryptographyPost-Quantum CryptographyCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. (PQC) algorithm support over DTLS 1.3, building on the PQC foundation introduced in OpenSSL 3.5.
    • Ships two reference demos — demos/dtlsecho and demos/dtlslistenerecho — illustrating DTLS 1.3 client/server usage.

    1 more in Everything

12. docs update Sep 1, 2026 · issue 061

    OpenSSL 4.1 adds -verify_partial to openssl cms, succeeding when at least one signature in a multi-signature CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly. message verifies.

13. docs update Sep 1, 2026 · issue 061

    OpenSSL adds dtls1_3 option to restrict connections to DTLS 1.3DTLS 1.3A UDP-based variant of TLS 1.3, standardized by the IETF, that adds record-layer sequencing and retransmission to handle packet loss, giving tools encrypted low-latency channels without TCP overhead. only

    • Adds dtls1_3 option (alongside existing dtls1 and dtls1_2) to constrain TLS clients/servers to DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.3 exclusively.

    1 detail in Everything

14. docs update Sep 1, 2026 · issue 061

    OpenSSL adds DTLSv1.3DTLSv1.3A version of DTLS, the datagram variant of TLS maintained by the IETF, that brings TLS 1.3 handshake and encryption improvements to UDP, giving tools encrypted low-latency channels without TCP overhead. documentation, signalling new protocol support in the master branch.

15. docs update Sep 1, 2026 · issue 061

    OpenSSL gains DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. listener APIs, new CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly. signer-info accessors, and a BIOBIOA BIOS-level firmware interface standard maintained by UEFI Forum that abstracts hardware initialisation, giving cyber tools a consistent way to interact with pre-boot environments across vendors. socket-readiness call

    • Adds SSL_LISTENER_FLAG_ADDRESS_VALIDATION, SSL_LISTENER_FLAG_NO_VALIDATE, and SSL_LISTENER_FLAG_SINGLE_THREAD flags to control behavior of QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. or DTLS listener SSL objects.
    • Adds SSL_VALUE_DTLS_LISTENER_MAX_DGRAM_SIZE, SSL_VALUE_DTLS_LISTENER_MAX_PENDING_CONNS, and SSL_VALUE_DTLS_LISTENER_PENDING_TIMEOUT configuration values for tuning DTLS listener capacity and timeouts.
    • Adds a callback function API to report creation of QUIC or DTLS listener connection SSL objects.
    • Adds support for configuring blocking mode on a QUIC or DTLS listener SSL object.
    • Adds CMS_SignerInfo_get0_signer_cert and CMS_SignerInfo_get_verification_result accessors for inspecting CMS signer certificate and verification outcome.

    5 details in Everything

16. 4.0.2 Aug 25, 2026 · release notes

    OpenSSL 4.0.2 adds OPENSSL_armcap(3) man page and LLVM icx compiler assembly support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 4.0.2 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 4.0.2

    • Adds OPENSSL_armcap(3) documentation page for ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. capability detection.
    • Adds support for selecting assembly code paths for LLVM-based Intel's icx compiler.

    2 details in Everything

17. docs update Jul 24, 2026 · issue 024

    OpenSSL adds three new ASN1_STRING API functions for length and data manipulation.

18. docs update Jul 24, 2026 · docs issue 004

    OpenSSL adds three new ASN1_STRING API functions for length and data manipulation.

19. 4.0.1 Jun 9, 2026 · release notes

    OpenSSL 4.0.1 fixes CVEs and regressions; introduces PSK identity length validation.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 4.0.1 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 4.0.1

    • Implemented validation of the minimal length of PSK identity being of at least one byte long, as required per RFC 8446.

    1 detail in Everything

20. openssl-4.0.0 Apr 14, 2026 · release notes

    OpenSSL 4.0 adds Encrypted Client Hello, ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code.-MU, post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. SM2/MLKEM, cSHAKE, and FFDHE for TLS 1.2.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch openssl-4.0.0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout openssl-4.0.0

    └──▷ TRY IT
    Install the FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. module with self-tests deferred until first use, reducing startup time in environments where immediate validation isn't required.
    copy

    $ openssl fipsinstall -out fips.conf -module fips.so -defer_tests

    Re-hash a certificate directory using the replacement for the removed c_rehash script.
    copy

    $ openssl rehash /etc/ssl/certs

    • Supports Encrypted Client Hello (ECH, RFC 9849) to hide the SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address. from passive observers.
    • Adds SM2/SM3 signature algorithm (sm2sig_sm3), key exchange group curveSM2, and post-quantum hybrid group curveSM2MLKEM768 per RFC 8998.
    • Adds cSHAKE function support per NIST SP 800-185.
    • Adds ML-DSA-MU digest algorithm support.
    • Adds SNMPSNMPA UDP-based protocol for querying and managing network devices, standardized by the IETF. Cyber tools use it to pull interface stats, topology data, and device state from routers, switches, and servers at scale. KDF and SRTP KDF support.

    +3 more show less

    • Enables deferred FIPS self-tests via the new -defer_tests option in openssl fipsinstall.
    • Supports negotiated FFDHE key exchange in TLS 1.2 per RFC 7919.
    • Supports static or dynamic VC runtime linkage on Windows.

    8 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed support for SSLv3; any configuration relying on SSLv3 will fail.
    • !Removed support for the SSLv2 Client Hello; clients sending SSLv2 hellos will be rejected.
    • !Removed engine support; code using ENGINE_* APIs or the no-engine build option will break.
    • !Removed deprecated fixed SSL/TLS version method functions (e.g., TLSv1_method()); call sites must be updated.
    • !Removed deprecated custom EVP_CIPHER, EVP_MD, EVP_PKEY, and EVP_PKEY_ASN1 methods; implementations using these will fail to compile.
    • !Removed ERR_get_state(), ERR_remove_state(), and ERR_remove_thread_state(); ERR_STATE is now always opaque.
    • !ASN1_STRING has been made opaque; code accessing its internals directly will break.
    • !Numerous API function signatures now include const qualifiers (including X509X509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. processing functions); code that assigned return values to non-const pointers may fail to compile.
    • !Removed c_rehash script; scripts or tooling invoking c_rehash must be updated to use openssl rehash.
    • !Removed the msie-hack option from openssl ca; configs or scripts using it will error.
    • !Support for deprecated elliptic curves in TLS (RFC 8422) and explicit EC curves are now disabled at compile-time by default; re-enable with enable-tls-deprecated-ec or enable-ec_explicit_curves.
    • !libcrypto no longer cleans up globally allocated data via atexit(); programs relying on this implicit cleanup may leak resources.
    • !OPENSSL_cleanup() now runs in a global destructor or not at all by default; code calling it explicitly may behave differently.
    • !Dropped darwin-i386{,-cc} and darwin-ppc{,64}{,-cc} build targets; builds for those platforms will fail.
    • !Lower bounds checks are now enforced for PKCS5_PBKDF2_HMAC when using the FIPS provider; calls with out-of-bounds parameters will now return errors.
    • !Removed BIO_f_reliable() without replacement; any code using it will fail to compile.
    • !BIO_snprintf() now delegates to libc snprintf(); behavior differences from the former internal implementation may surface.
21. 3.6.1 Jan 27, 2026 · release notes

    OpenSSL 3.6.1 includes a significant change to the RISC-V capabilities string format.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.6.1 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 3.6.1

22. openssl-3.6.0 Oct 1, 2025 · release notes

    OpenSSL 3.6.0 adds LMS signature verification, FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. 186-5 deterministic ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace., opaque symmetric key objects, and a new configutl utility.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch openssl-3.6.0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout openssl-3.6.0

    └──▷ TRY IT
    Inspect the fully resolved OpenSSL configuration (useful when debugging FIPS provider or engine config issues in a deployment).
    copy

    $ openssl configutl

    • Adds LMS (Leighton-Micali Signature) signature verification per SP 800-208 in both the FIPS and default providers.
    • Adds FIPS 186-5 deterministic ECDSA signature generation to the FIPS provider.
    • Introduces EVP_SKEY opaque symmetric key objects with new EVP_KDF_CTX_set_SKEY(), EVP_KDF_derive_SKEY(), and EVP_PKEY_derive_SKEY() functions for key derivation and key exchange provider methods.
    • Adds NIST security categories for PKEY objects.
    • New openssl configutl utility for parsing and dumping the resolved OpenSSL configuration file.

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !An ANSI-C (C89) toolchain is no longer sufficient to build OpenSSL; a C99-capable compiler is now required.
    • !Support for VxWorks platforms has been removed.
23. openssl-3.5.0 Apr 8, 2025 · release notes

    OpenSSL 3.5.0 adds server-side QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking., post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. crypto (ML-KEMML-KEMNIST's post-quantum key-exchange standard (FIPS 203), formerly Kyber. Two parties use it to agree on a shared secret, usually alongside X25519 in a hybrid TLS handshake., ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code., SLH-DSASLH-DSANIST's hash-based post-quantum signature standard (FIPS 205), formerly SPHINCS+. Its security rests only on hash functions, so it is slower and larger than ML-DSA but a conservative backup.), and opaque symmetric key objects.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch openssl-3.5.0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout openssl-3.5.0

    • Adds server-side QUIC support (RFC 9000), enabling OpenSSL-based servers to accept QUIC connections natively.
    • Adds support for third-party QUIC stacks, including 0-RTT support.
    • Adds PQCPQCCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. algorithm support: ML-KEM, ML-DSA, and SLH-DSA.
    • Enables hybrid PQC KEM groups by default in TLS, preferring X25519MLKEM768 alongside X25519X25519The elliptic-curve key exchange most modern TLS, SSH and WireGuard connections use to agree on a session key. Post-quantum hybrids pair it with ML-KEM. as the default keyshares.
    • Supports multiple TLS keyshares and improved TLS key establishment group configurability.

    +6 more show less

    • New no-tls-deprecated-ec build configuration option to disable TLS groups deprecated in RFC 8422.
    • New enable-fips-jitter build configuration option to make the FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. provider use the JITTER entropy seed source.
    • Adds support for central key generation in CMP (Certificate Management Protocol).
    • Adds opaque symmetric key object support via the new EVP_SKEY API.
    • Adds API support for pipelining in provided cipher algorithms.
    • Changes default encryption cipher for req, cms, and smime applications from des-ede3-cbc to aes-256-cbc.

    11 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The default encryption cipher for the req, cms, and smime applications is changed from des-ede3-cbc to aes-256-cbc; existing scripts or interoperability flows that rely on the 3DES default will produce different output.
    • !The default TLS supported groups list now includes and prefers hybrid PQC KEM groups, and some previously available groups have been removed from the default list; peers that do not support these groups may experience handshake failures.
    • !The default TLS keyshares are changed to offer X25519MLKEM768 and X25519; deployments depending on the previous default keyshares may see changed behaviour during TLS negotiation.
    • !All BIO_meth_get_*() functions are deprecated; code calling these functions will receive deprecation warnings and support may be removed in a future release.
24. 3.4.0 Oct 22, 2024 · release notes

    OpenSSL 3.4 adds PBMAC1 support, CMP templates/CRLs, XOF size API, and -not_before/-not_after cert dates

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.4.0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 3.4.0

    • Added JITTER random seed source using a statically linked jitterentropy library.
    • Adds encapsulation and decapsulation operations to the pkeyutl command.
    • Added XOF DIGEST API with EVP_xof() helper and updated context size macros for SHAKE digests.
    • Added support for directly fetched composite signature algorithms (e.g. RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it.-SHA2-256) in EVP signing APIs.
    • Added FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. indicators to allow logging of unapproved algorithms via OSSL_INDICATOR_set_callback() in the FIPS provider.

    +7 more show less

    • Added -not_before and -not_after options to req, x509x509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols., and ca commands for explicit certificate date setting.
    • Added CMP support for retrieving certificate request templates (-template) and CRLs (-crlcert, -oldcrl, -crlout, -crlform>, -rsp_crl).
    • Added TLS integrity-only cipher suites TLS_SHA256_SHA256 and TLS_SHA384_SHA384 (RFC 9150).
    • Added support for multiple X.509v3 extensions including issuedOnBehalfOf, auditIdentity, and others.
    • Added Attribute Certificate (RFC 5755) support via public API.
    • Added enable-pie configuration option to build Position Independent Executables.
    • Redesigned Windows OPENSSLDIR/ENGINESDIR/MODULESDIR to use registry keys at run time.

    12 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !RSA encryption using PKCS1 padding is no longer approved in the FIPS provider.
    • !SSL_SESSION_get_time(), SSL_SESSION_set_time(), and SSL_CTX_flush_sessions() are deprecated in favor of their _ex() replacements.
25. OpenSSL_0_9_6 Sep 21, 2024 · release notes

    OpenSSL 0.9.6 adds rsautl, MD4, DER/PEM SMIME support, enhanced chain verification, and external crypto device integration.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_6 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_6

    └──▷ TRY IT
    Sign an S/MIMES/MIMEAn email encryption and signing standard that uses X.509 certificates to authenticate senders and protect message contents; cyber tools use it to verify identity and enforce confidentiality over standard mail protocols. message and output it in DER format for use in environments requiring binary-encoded CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly. messages.
    copy

    $ openssl smime -sign -in message.txt -signer cert.pem -inkey key.pem -outform DER -out message.p7

    • New rsautl application for low-level RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. sign, verify, encrypt, and decrypt operations.
    • Adds MD4 digest algorithm support.
    • New sign and verify options added to the dgst application.
    • Supports DER and PEM encoded messages in the smime application.
    • Enhanced chain verification using key identifiers in certificate path validation.

    +2 more show less

    • Support for external crypto devices via the ENGINE interface (separate distribution).
    • Enhanced EVP interface for cryptographic operations.

    7 details in Everything

26. OpenSSL_0_9_7a Sep 21, 2024 · release notes

    OpenSSL 0.9.7a adds FreeBSD/IA64 and FreeBSD/Sparc64 support, manual TLS cert chain building, and optional ENGINE-free builds.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_7a https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_7a

    • Supports two new platforms: FreeBSD/IA64 and FreeBSD/Sparc64.
    • Enables manual certificate chain building in SSL/TLS connections.
    • Allows building OpenSSL without the ENGINE framework.
    • Improves compatibility with MIT KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application..
    • Includes IA32 assembler enhancements for improved performance.

    5 details in Everything

27. OpenSSL_0_9_7b Sep 21, 2024 · release notes

    OpenSSL 0.9.7b adds RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. blinding by default, linux-ia64-ecc platform support, and improved mingw/AIX/Irix builds.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_7b https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_7b

    • Enables RSA blinding by default to harden against timing side-channel attacks.
    • Adds support for the linux-ia64-ecc platform.
    • Adds improved build support for mingw, AIX, and Irix configurations.

    3 details in Everything

28. OpenSSL_0_9_7c Sep 21, 2024 · release notes

    OpenSSL 0.9.7c adds -ignore_err option to the OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists. utility.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_7c https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_7c

    └──▷ TRY IT
    Check certificate revocation status while ignoring non-fatal OCSP errors — useful when an OCSP responder returns soft failures you want to tolerate in testing or monitoring pipelines.
    copy

    $ openssl ocsp -ignore_err -issuer issuer.pem -cert cert.pem -url http://ocsp.example.com

29. OpenSSL_0_9_7d Sep 21, 2024 · release notes

    OpenSSL 0.9.7d allows multiple active certificates with the same subject in the CA index and speeds up HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. operations.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_7d https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_7d

    • Supports multiple active certificates with the same subject in the CA index.
    • Speeds up HMAC and other cryptographic operations.

    2 details in Everything

30. OpenSSL_0_9_7g Sep 21, 2024 · release notes

    OpenSSL 0.9.7g adds proxy certificate processing per RFC 3820

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_7g https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_7g

31. OpenSSL_0_9_7 Sep 21, 2024 · release notes

    OpenSSL 0.9.7 adds OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists., AES, elliptic curves, KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application./AES TLS suites, new hardware engines, and CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live. checking.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_7 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_7

    • New OCSP library section for Online Certificate Status Protocol support.
    • New elliptic curve cryptography library section.
    • New AES (Rijndael) library section with AES cipher suite support in SSL/TLS (RFC3268).
    • CRL checking now available in the verify code and the openssl utility.
    • Extension copying added to the ca utility.

    +15 more show less

    • Flexible display options added to the ca utility.
    • Provisional support for international characters via UTF-8.
    • Hardware engine support (engine) is now built into the main distribution — no longer a separate package.
    • New hardware engine support: Broadcom ubsec, Accelerated Encryption Processing, IBM 4758.
    • SSL/TLS: optional cipher selection according to server preference.
    • SSL/TLS: server can now explicitly set new session IDs.
    • SSL/TLS: Kerberos cipher suite support (RFC2712, MIT Kerberos).
    • SSL/TLS: finer-grained control over renegotiations and sessions.
    • SSL/TLS: new callback to retrieve SSL/TLS messages.
    • NCONF: new configuration handling routines.
    • PRNG now queries additional locations for random devices and auto-detects EGD-style random sources.
    • Unified handling of cryptographic algorithms (software and engine) via EVP routines for both asymmetric and symmetric ciphers.
    • Support for new platforms: Windows CE, Tandem OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees., A/UX, AIX 64-bit, Linux x86_64, Linux 64-bit on SPARC v9.
    • Extended platform support for VxWorks and enhanced shared library support.
    • Support for pkg-config integration.

    20 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The DES API namespace has been changed to avoid collisions with libdes; macros for backward compatibility are provided but will be removed in a future release.
32. OpenSSL_0_9_8b Sep 21, 2024 · release notes

    OpenSSL 0.9.8b adds EVP cipher context heap API, updated ECC cipher suites, and Win32 dynamic engine compilation.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_8b https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_8b

    • New EVP_CIPHER_CTX_new() and EVP_CIPHER_CTX_free() functions enable heap-allocated cipher context management in the EVP API.
    • Updated ECC cipher suite support expands elliptic-curve TLS options.
    • Built-in dynamic engine compilation support on Win32 allows engines to be compiled and loaded dynamically on that platform.

    3 details in Everything

33. OpenSSL_0_9_8f Sep 21, 2024 · release notes

    OpenSSL 0.9.8f adds TLS Extensions, RFC4507bis session tickets, DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. improvements, and AES/SSE2 assembly optimizations for VC++.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_8f https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_8f

    • Adds RFC4507bis session ticket support, allowing stateless TLS session resumption without server-side session cache.
    • Supports Server Name Indication (SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address.) extension when explicitly enabled at compile time, enabling virtual hosting over TLS.
    • Adds AES and SSE2 assembly-language optimizations for VC++ builds, accelerating symmetric crypto on Windows x86 targets.
    • Delivers DTLS (Datagram TLS) improvements for UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery.-based encrypted communications.
    • Adds gcc 4.2 compiler support.

    5 details in Everything

34. OpenSSL_0_9_8m Sep 21, 2024 · release notes

    OpenSSL 0.9.8m adds RFC 5746 TLS renegotiation extension support and removes MD2 from algorithm tables.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_8m https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_8m

    • Supports RFC 5746 TLS renegotiation extension, enabling secure renegotiation per the IETF standard.
    • Removes MD2 from algorithm tables, hardening the default cryptographic surface.

    2 details in Everything

35. OpenSSL_0_9_8 Sep 21, 2024 · release notes

    OpenSSL 0.9.8 adds ECDH/ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace., DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic., SHA-2 family, RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it.-PSS, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. certs, and a new STORE library.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_0_9_8 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_0_9_8

    └──▷ TRY IT
    Hash a file with SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. (new FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. 180-2 algorithm) instead of the legacy MD5 default.
    copy

    $ openssl dgst -sha256 <file>

    • Adds ECDH and ECDSA elliptic curve cryptography, accessible via EVP, X509X509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols., and ENGINE interfaces.
    • Adds BIGNUM support for fields GF(2^m) and NIST curves to underpin elliptic crypto operations.
    • Adds support for DTLS (Datagram Transport Layer Security).
    • Adds FIPS 180-2 hash algorithms: SHA-224, SHA-256, SHA-384, and SHA-512.
    • Adds support for the RSA-PSS encryption scheme.

    +24 more show less

    • Adds support for RSA X.931 padding.
    • New PKCS#12PKCS#12A file format standard from RSA Labs, now maintained under IETF, that bundles a private key, certificate, and chain into one encrypted container, letting cyber tools ship or load credentials as a single portable file. medium level API for programmatic manipulation of PKCS#12 files.
    • New ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses..1 mini-compiler usable through the OpenSSL configuration file.
    • Adds support for ASN.1 indefinite length constructed encoding.
    • New STORE library providing a unified interface to data repositories for keys, certificates, CRLs, and arbitrary blobs.
    • New X509_VERIFY_PARAM structure enabling parametrisation of X.509 path validation.
    • Adds support for IPv6 addresses in certificate extensions (RFC 1884 §2.2).
    • Adds support for certificate policy mappings, policy constraints, and name constraints.
    • Adds support for multiple certificates with the same subject in the openssl ca index file.
    • New openssl ca -selfsign option to create self-signed certificates.
    • New openssl ca -create_serial option to generate a serial number file.
    • ENGINE framework now loads dynamic engine modules automatically from specified directories.
    • New GMPGMPGNU Multiple Precision Arithmetic Library, a free library for arbitrary-precision integers, rationals, and floats; cyber tools use it when cryptographic operations require big-number math beyond native integer limits. engine module for private key exponentiation.
    • New VIA PadLock ACE engine module for VIA C3 Nehemiah processors.
    • Adds support for multi-valued AVAs in the OpenSSL configuration file.
    • New BIGNUM blinding support.
    • PKCS#7 library updated to support one-pass S/MIMES/MIMEAn email encryption and signing standard that uses X.509 certificates to authenticate senders and protect message contents; cyber tools use it to verify identity and enforce confidentiality over standard mail protocols. processing.
    • Adds compile-time option to exclude deprecated functionality via OPENSSL_NO_DEPRECATED macro or no-deprecated config argument.
    • Adds support for files larger than 2 GB.
    • Adds initial support for Win64.
    • Adds support for BSD sockets on NetWare.
    • Major RC4 performance overhaul on Intel P4, IA-64, and AMD64.
    • New control functions for the error stack.
    • New BUF functions and binary search functions with extended functionality.

    29 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The default digest in openssl commands is changed from MD5 to SHA-1SHA-1A cryptographic hash function standardized by NIST that produces a 160-bit digest; tools use it for file integrity checks, though it is now considered cryptographically broken and unsuitable for collision-resistant applications..
    • !The Configure script now disables some algorithms by default; they must be explicitly enabled with enable-xxx.
    • !The key-generation and primality testing progress mechanism now requires a structure containing the ticker function and an argument, rather than a plain callback.
36. OpenSSL_1_0_0e Sep 21, 2024 · release notes

    OpenSSL 1.0.0e adds ECDH cipher suite support for SHA-2 certificates and EC timing-attack protections.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_1_0_0e https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_1_0_0e

    • Supports ECDH cipher suites for certificates using SHA-2 algorithms.
    • Adds protection against EC timing-channel attacks.

    2 details in Everything

37. OpenSSL_1_0_0 Sep 21, 2024 · release notes

    OpenSSL 1.0.0 adds CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly., GOST, PSK, RFC3161 timestamps, Whirlpool, and full PKCS#8 private key support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_1_0_0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_1_0_0

    • Adds RFC3280 path validation sufficient to process PKITS tests.
    • Adds integrated support for PVK files and keyblobs.
    • Changes default private key format to PKCS#8.
    • Adds CMS (Cryptographic Message Syntax) support, able to process all examples in RFC4134.
    • Adds streaming ASN1 encode support for PKCS#7 and CMS.

    +14 more show less

    • Adds multiple signer and signer-add support for PKCS#7 and CMS.
    • Adds ASN1 printing support.
    • Adds Whirlpool hash algorithm.
    • Adds RFC3161 time stamp support.
    • Introduces new generalised public key API supporting ENGINE-based algorithms.
    • Introduces new generalised public key API utilities.
    • Adds new ENGINE supporting GOST algorithms.
    • Adds SSL/TLS GOST ciphersuite support.
    • Adds PKCS#7 and CMS GOST support.
    • Adds RFC4279 PSK ciphersuite support.
    • Adds supported points format extension for ECC ciphersuites.
    • Adds ecdsa-with-SHA224/256/384/512 signature types.
    • Adds dsa-with-SHA224 and dsa-with-SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. signature types.
    • Adds Opaque PRF Input TLS extension support.

    19 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The default private key format is now PKCS#8; tooling or scripts that expect the legacy PEM format by default will produce or consume keys in a different format on upgrade.
38. OpenSSL_1_0_1g Sep 21, 2024 · release notes

    Adds TLS padding extension workaround for broken servers

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_1_0_1g https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_1_0_1g

39. OpenSSL_1_0_1 Sep 21, 2024 · release notes

    OpenSSL 1.0.1 adds TLS 1.2/1.1, DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic.-SRTP, heartbeat, SCTPSCTPA transport-layer protocol (RFC 4960) maintained by the IETF that delivers messages with optional ordering and built-in multi-homing, giving cyber tools reliable framing without TCP's head-of-line blocking., SRP, and key material export.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_1_0_1 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_1_0_1

    • Adds TLS v1.2 and TLS v1.1 protocol support.
    • Adds TLS/DTLS heartbeat support.
    • Adds SCTP (Stream Control Transmission Protocol) transport support.
    • Adds RFC 5705 TLS key material exporter.
    • Adds RFC 5764 DTLS-SRTP negotiation for secure media transport.

    +5 more show less

    • Adds Next Protocol Negotiation (NPN) extension support.
    • Adds PSS signatures in certificates, certificate requests, and CRLs.
    • Adds password-based recipient info support for CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly..
    • Adds SRP (Secure Remote Password) support.
    • Adds preliminary FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. capability for the unvalidated 2.0 FIPS module.

    10 details in Everything

40. OpenSSL_1_0_2 Sep 21, 2024 · release notes

    OpenSSL 1.0.2 adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.2, Suite B, ALPN, Brainpool, and expanded CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly. algorithm support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_1_0_2 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_1_0_2

    • Adds Suite B support for TLS 1.2 and DTLS 1.2, enabling NSA Suite B cryptography compliance.
    • Supports DTLS 1.2, bringing the latest datagram TLS version to OpenSSL.
    • Enables automatic EC curve selection for TLS connections.
    • New API to set TLS supported signature algorithms and curves programmatically.
    • New SSL_CONF configuration API for streamlined TLS configuration.

    +3 more show less

    • Adds TLS Brainpool curve support.
    • Supports ALPN (Application-Layer Protocol Negotiation) for protocol multiplexing over TLS.
    • Expands CMS support to include RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it.-PSS, RSA-OAEP, ECDH, and X9.42 DH algorithms.

    8 details in Everything

41. OpenSSL_1_1_0 Sep 21, 2024 · release notes

    OpenSSL 1.1.0 adds ChaCha20/Poly1305, X25519X25519The elliptic-curve key exchange most modern TLS, SSH and WireGuard connections use to agree on a session key. Post-quantum hybrids pair it with ML-KEM., DANE TLSA, Certificate TransparencyCertificate TransparencyA public, append-only log system maintained by various operators (Google runs several) that records every TLS certificate issued, letting anyone audit CAs for misissued or rogue certificates., async crypto, and more.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_1_1_0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_1_1_0

    • Adds ChaCha20 and Poly1305 support to both libcrypto and libssl.
    • Adds support for X25519 key exchange.
    • Adds support for RFC6698/RFC7671 DANE TLSA peer authentication.
    • Adds Certificate Transparency support.
    • Adds HKDF support to libcrypto.

    +16 more show less

    • Adds support for scryptscryptA password-hashing function that requires substantial memory for each guess, making large-scale password cracking more expensive. algorithm.
    • Adds support for OCB mode in libcrypto.
    • Adds support for asynchronous crypto operations in libcrypto and libssl.
    • Adds pipelining support for improved throughput in TLS.
    • Adds the AFALG engine for kernel-accelerated crypto on Linux.
    • Adds new threading API.
    • Adds support for extended master secret.
    • Adds CCM ciphersuites.
    • Adds new security levels to libssl.
    • Adds KDF algorithm support, including TLS PRF as a KDF.
    • Extends SSL_CONF support to configuration files.
    • Reworked BIOBIOA BIOS-level firmware interface standard maintained by UEFI Forum that abstracts hardware initialisation, giving cyber tools a consistent way to interact with pre-boot environments across vendors. networking library with full IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. support.
    • Introduces new unified build system.
    • Deprecated interfaces can now be disabled at build time via no-deprecated or --api= Configure options.
    • Application software can be compiled with -DOPENSSL_API_COMPAT=version to gate deprecated API exposure.
    • Shared builds are now the default when possible.

    21 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Most libcrypto and libssl public structures are now opaque (including BIGNUM, EC_KEY, DH, DSA, RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it., BIO, EVP_MD_CTX, EVP_CIPHER_CTX, EVP_PKEY, HMAC_CTX, X509X509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols., X509_CRL, X509_STORE, and related types), breaking code that accesses their members directly.
    • !libssl internal structures are now opaque, breaking any code that accessed them directly.
    • !SSLv2 support has been removed.
    • !KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application. ciphersuite support has been removed.
    • !RC4 has been removed from DEFAULT ciphersuites in libssl.
    • !40-bit and 56-bit cipher support has been removed from libssl.
    • !All public header files moved to include/openssl; no more symlinking, which may break build systems expecting the old layout.
    • !Configure now uses --prefix as the main installation directory; --openssldir is now exclusively for certs, private keys, and openssl.cnf.
42. OpenSSL_1_1_1h Sep 21, 2024 · release notes

    OpenSSL 1.1.1h lets MinProtocol/MaxProtocol configure both TLS and DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. contexts in a single setting.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_1_1_1h https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_1_1_1h

    └──▷ USE IT
    Set a minimum protocol floor for both TLS and DTLS clients/servers in a single openssl.cnf stanza instead of maintaining separate configs.
    ini copy

    # In openssl.cnf
    [system_default_sect]
    MinProtocol = TLSv1.2
    MaxProtocol = TLSv1.3

    • Enables MinProtocol and MaxProtocol config directives to govern both TLS and DTLS contexts simultaneously.
    • Enforces disallowance of explicit curve parameters in verification chains when X509_V_FLAG_X509_STRICT is set.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Explicit curve parameters in verification chains are now rejected when X509_V_FLAG_X509_STRICT is used, which may break certificate verification for chains that previously relied on explicit curve parameters under strict mode.
43. OpenSSL_1_1_1 Sep 21, 2024 · release notes

    OpenSSL 1.1.1 adds TLSv1.3, overhauled RNG, EdDSAEdDSAA fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe./SM2/SHA3 algorithms, and a new URI-based STORE module.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch OpenSSL_1_1_1 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout OpenSSL_1_1_1

    • Adds fully compliant TLSv1.3 (RFC 8446) support enabled by default, including 0-RTT early data, post-handshake authentication, key update, middlebox compatibility mode, PSKs, and all five RFC 8446 ciphersuites.
    • Supports stateless TLS server mode and configurable session ticket support under TLSv1.3.
    • Backports RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it.-PSS signature algorithms to TLSv1.2.
    • Rewrites the OpenSSL RNG around an AES-CTR DRBG (NIST SP 800-90Ar1) with per-thread public/private DRBG instances, seed chaining, fork-safety, and optional secure-heap storage.
    • Adds SHA3, SHA512/224, SHA512/256, EdDSA (Ed25519Ed25519A fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe. and Ed448 with X.509X.509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. and TLS support), X448, multi-prime RSA, SM2, SM3, SM4, SipHash, and ARIA (with TLS support).

    +5 more show less

    • New ClientHello callback enables adjustment of the SSL object before handshake processing begins.
    • Adds Maximum Fragment Length TLS extension negotiation and support.
    • New STORE module provides a uniform, URI-based reader for keys, certificates, CRLs, and other objects.
    • Claim of OSSL and OPENSSL symbol prefix namespaces for cleaner library symbol management.
    • Rewrites the devcrypto engine.

    10 details in Everything

44. openssl-3.0.0 Sep 21, 2024 · release notes

    OpenSSL 3.0 adds providers, CMP, Kernel TLS, EVP_MAC/KDF APIs, OSSL_ENCODER/DECODER, and new CLI commands.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch openssl-3.0.0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout openssl-3.0.0

    └──▷ TRY IT
    Derive a key using HKDF via the new openssl kdf command — handy for generating key material in protocol implementations or test vectors.
    copy

    $ openssl kdf -keylen 32 -kdfopt digest:SHA256 -kdfopt key:mysecret -kdfopt salt:mysalt -kdfopt info:myinfo HKDF

    Compute an HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. using the new openssl mac command as a quick CLI alternative to external HMAC tools.
    copy

    $ openssl mac -digest SHA256 -macopt key:mysecretkey -in data.bin HMAC

    • Adds providers, a new pluggability framework replacing the ENGINE API, enabling fully modular cryptographic implementations.
    • Implements support for fully pluggable TLSv1.3 groups.
    • Adds Kernel TLS (KTLS) support for offloading TLS record processing to the OS kernel.
    • Adds a full Certificate Management Protocol (CMP, RFC 4210) implementation — including CRMF (RFC 4211) and HTTP transfer (RFC 6712) — with a new cmp CLI app covering both client and server roles.
    • Adds a proper HTTP client supporting GET/POST, TLS, persistent connections, HTTP(S) proxy, redirects, user-defined BIOs, and timeout checks.

    +15 more show less

    • Adds EVP_MAC, an EVP-layer MAC API supporting BLAKE2, CMAC, GMAC, HMAC, KMAC, POLY1305, and SIPHASH.
    • Adds EVP_KDF, an EVP-layer KDF/PRF API supporting HKDF, KBKDF, KRB5 KDF, PBKDF2, PKCS12PKCS12A file format standard from RSA Labs, now maintained under IETF, that bundles a private key, certificate, and chain into one encrypted container, letting cyber tools ship or load credentials as a single portable file. KDF, SCRYPT, SSH KDF, SSKDF, TLS1 PRF, X9.42 KDF, and X9.63 KDF.
    • Adds new openssl mac command for MAC computation via the EVP_MAC API.
    • Adds new openssl kdf command for key derivation via the EVP_KDF API.
    • Adds openssl info command and OPENSSL_info() API for querying built-in configuration data.
    • Enhances openssl list with many new options for inspecting available algorithms, providers, and capabilities.
    • Adds OSSL_ENCODER and OSSL_DECODER, generic encoder/decoder APIs for key and certificate serialization.
    • Adds OSSL_LIB_CTX, a library context enabling multiple isolated libcrypto instances within a single process.
    • Adds OSSL_PARAM_BLD, a simpler builder API for constructing OSSL_PARAM arrays.
    • Adds OSSL_PROVIDER_available() to programmatically check whether a given provider is loaded.
    • Adds convenience functions for generating asymmetric key pairs.
    • Adds error raising macros ERR_raise() and ERR_raise_data() for structured error reporting.
    • Adds instrumentation support through trace and debug output.
    • Includes X25519X25519The elliptic-curve key exchange most modern TLS, SSH and WireGuard connections use to agree on a session key. Post-quantum hybrids pair it with ML-KEM., X448, Ed25519Ed25519A fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe., Ed448, SHAKE128, and SHAKE256 in the FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. provider.
    • Moves legacy ciphers (CAST5, BF, IDEA, SEED, RC2, RC4, RC5, DES) and legacy digests (MD2, MD4, MDC2, WHIRLPOOL, RIPEMD-160) to the legacy provider.

    20 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !SSL 3, TLS 1.0, TLS 1.1, and DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.0 only work at security level 0; they are blocked at higher security levels.
    • !X509X509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. certificates signed using SHA1 are no longer trusted at security level 1 or higher; since the default TLS security level is 1, SHA1-signed certificates no longer authenticate servers or clients by default.
    • !The RAND_DRBG API is removed; code using it will not compile.
    • !Interactive mode is removed from the openssl program; scripts relying on it will break.
    • !The heartbeat message feature in DTLS is removed.
    • !CAST5, BF, IDEA, SEED, RC2, RC4, RC5, and DES EVP ciphers are moved to the legacy provider; setups not loading the legacy provider will lose access to these algorithms.
    • !MD2, MD4, MDC2, WHIRLPOOL, and RIPEMD-160 EVP digests are moved to the legacy provider; setups not loading the legacy provider will lose access to these digests.
45. 3.3.0 Apr 9, 2024 · release notes

    OpenSSL 3.3 adds QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. tracing (qlog), CMPv3 profile support, x509x509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. issuer/subject flags, and Y2038-safe session time APIs

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.3.0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 3.3.0

    • Adds experimental qlog tracing for QUIC connections; its pre-standard output has no format stability guarantee and can be disabled with no-unstable-qlog.
    • Adds -profile CLI option to enable certProfile request message header in CMPv3 (RFC 9480/9483).
    • Adds -set_issuer and -set_subject options to openssl x509 to override certificate Issuer and Subject fields.
    • Adds SSL_SESSION_get_time_ex() and SSL_SESSION_set_time_ex() using time_t; Y2038 safety on 32-bit systems requires 64-bit time support.
    • Adds new option SSL_OP_PREFER_NO_DHE_KEX to prefer PSK-only key exchange in TLS 1.3.

    +10 more show less

    • Adds API SSL_write_ex2 to send end-of-stream (FIN) condition efficiently for QUIC.
    • Adds atexit configuration switch to control OPENSSL_cleanup registration on libcrypto unload.
    • Adds APIs to configure negotiated idle timeout and query additional stream count for QUIC connections.
    • Adds API to disable implicit QUIC event processing, allowing manual control of event handling.
    • Adds limited non-blocking polling support for QUIC connection and stream objects via SSL_poll(3).
    • Adds APIs to query size and utilisation of a QUIC stream's write buffer via SSL_get_value_uint(3).
    • Adds default limit of 256 header lines for HTTP client responses, configurable via OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines.
    • Adds new API EVP_DigestSqueeze() to allow multiple SHAKE squeezes with different output sizes.
    • Adds assembly implementation for md5 on loongarch64 and optimizes AES-CTR for ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. Neoverse V1/V2.
    • Enables AES and SHA3 optimisations on Apple Silicon M3-based MacOS systems.

    15 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The -verify option to openssl crl and openssl req now exits with code 1 on failure instead of continuing or returning 0.
    • !The activate and soft_load configuration settings in openssl.cnf now require strict values ([1|yes|true|on] or [0|no|false|off]); other values result in an error.
46. 3.2.0 Nov 23, 2023 · release notes

    OpenSSL 3.2.0 adds client-side QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking. support, HPKE (RFC9180), pluggable TLS signatures, and new CLI/config surfaces.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.2.0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 3.2.0

    • Added client side support for QUIC
    • Provide a new configure option no-http that can be used to disable the HTTP support.
    • Add the -quic option to s_client to enable connectivity to QUIC servers.
    • Add an advanced command mode to s_client. Use this with the -adv option.
    • Added support for Hybrid Public Key Encryption (HPKE) as defined in RFC9180.

    +10 more show less

    • Added support for pluggable (provider-based) TLS signature algorithms.
    • Added support for certificate compression (RFC8879).
    • Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
    • Add the -ktls option to s_server and s_client commands to enable the KTLS support.
    • Added platform-agnostic OSSL_sleep() function.
    • Provide a new configure option no-ecx that can be used to disable the X25519X25519The elliptic-curve key exchange most modern TLS, SSH and WireGuard connections use to agree on a session key. Post-quantum hybrids pair it with ML-KEM., X448, and EdDSAEdDSAA fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe. support.
    • Add Raw Public Key (RFC7250) support.
    • Added SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data./192 algorithm support.
    • Added new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    • Support for loading root certificates from the Windows certificate store has been added.

    15 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The default SSL/TLS security level has been changed from 1 to 2. RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it., DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys of 160 bits and above and less than 224 bits were previously accepted by default but are now no longer allowed.
    • !The ess_cert_id_alg configuration option which is used to calculate the TSA's public key certificate identifier has its default algorithm updated from sha1 to sha256.
47. 3.1.1 May 30, 2023 · release notes

    OpenSSL 3.1.1 adds -pedantic flag to fipsinstall and no_drbg_truncated_digests option for stricter FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. compliance

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.1.1 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 3.1.1

    • Adds -pedantic option to fipsinstall subcommand to enforce strict FIPS compliance.
    • Adds -no_drbg_truncated_digests option to openssl fipsinstall to disallow truncated digests in Hash and HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. DRBGs per FIPS 140-3FIPS 140-3A US federal standard, maintained by NIST, that defines requirements for cryptographic modules used in government systems. Cyber tools target it to satisfy procurement mandates requiring validated crypto. IG D.R.

    2 details in Everything

48. 3.1.0 Mar 14, 2023 · release notes

    OpenSSL 3.1.0 adds EMS enforcement flag, KMAC support, ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. RNDR providers, and PSS salt default changes

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.1.0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 3.1.0

    • -ems_check flag added to openssl fipsinstall to enforce Extended Master Secret check during TLS1_PRF KDF
    • KMAC support added for KBKDF
    • RNDR and RNDRRS random number generation support added for Arm CPUsCPUsThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. (aarch64) via provider functions
    • s_client and s_server commands now explicitly indicate when TLS version lacks renegotiation mechanism

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The default salt length for PKCS#1 RSASSA-PSS signatures changes to the maximum size smaller or equal to the digest length (via OSSL_PKEY_RSA_PSS_SALT_LEN_AUTO_DIGEST_MAX), which may affect existing workflows relying on the previous default
    • !OPENSSL_LH_stats and related OPENSSL_LH statistics functions are deprecated from OpenSSL 3.1; defining OPENSSL_NO_DEPRECATED_3_1 disables these functions.
    • !DEFINE_LHASH_OF is now deprecated in favour of DEFINE_LHASH_OF_EX; users may start receiving deprecation warnings
49. 3.0.7 Nov 1, 2022 · release notes

    OpenSSL 3.0.7 adds RIPEMD160 to the default provider and fixes regressions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.0.7 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 3.0.7

    • Adds RIPEMD160 to the default provider so it is available for use without loading external providers.

    1 detail in Everything

50. 3.0.3 May 3, 2022 · release notes

    OpenSSL 3.0.3 adds case-insensitive string comparison via new locale-agnostic functions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.0.3 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 3.0.3

    • Implements new OPENSSL_str[n]casecmp functions for case insensitive string comparison using POSIXPOSIXA family of standards for operating-system interfaces, including process, file and shell behavior. Software that uses these interfaces is easier to move between compatible systems. locale semantics
    • Changes OPENSSL_LH_stats and OPENSSL_LH_stats_bio to report only num_items, num_nodes and num_alloc_nodes statistics

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !OPENSSL_LH_stats and OPENSSL_LH_stats_bio no longer report valid values for any statistics other than num_items, num_nodes and num_alloc_nodes
51. 3.0.1 Dec 14, 2021 · release notes

    OpenSSL 3.0.1 adds configurable integer parsing and unexportable key fallbacks in the provider system.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 3.0.1 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 3.0.1

    • Allow sign extension in OSSL_PARAM_allocate_from_text() for OSSL_PARAM_INTEGER and reject negative numbers for OSSL_PARAM_UNSIGNED_INTEGER.
    • Make OSSL_PARAM_BLD_push_BN{,_pad}() return an error on negative numbers.
    • Allow copying uninitialized digest contexts with EVP_MD_CTX_copy_ex.
    • Allow fetching an operation from the provider that owns an unexportable key as a fallback if allowed by the property query.

    4 details in Everything

52. 1.1.1d Sep 10, 2019 · release notes

    OpenSSL 1.1.1d hardens EC parameter handling and corrects EBCDIC extended-master-secret compatibility.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.1d https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.1.1d

    • EC key loading now respects built-in curve names over explicit parameters by default when using EC_GROUP_new_from_ecpkparameters() or EC_GROUP_new_from_ecparameters().

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !TLS connections between EBCDIC systems with this fix and those without may fail if they negotiate Extended Master Secret (EMS).
53. 1.0.2s May 28, 2019 · release notes

    OpenSSL 1.0.2s adds FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. support for Android Arm 64-bit and updates default key sizes.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.2s https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.2s

    • Adds FIPS Object Module support for the android64-aarch64 target on Android Arm 64-bit platforms
    • Changes the default RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it., DSA and DH key size to 2048 bits in the genpkey command when no size is specified

    2 details in Everything

54. 1.1.0k May 28, 2019 · release notes

    OpenSSL 1.1.0k changes default key sizes and adds SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. hardening.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.0k https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.1.0k

    • Changes the default RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it., DSA and DH key size to 2048 bits in genpkey.
    • Adds SCA hardening for modular field inversion in EC_GROUP via a new dedicated field_inv() pointer in EC_METHOD.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The genpkey command now defaults to 2048-bit keys instead of 1024-bit, potentially changing the output of scripts that omit explicit size arguments.
55. 1.1.1c May 28, 2019 · release notes

    OpenSSL 1.1.1c adds C++ build tests, SHA3 pre-hashing for ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace./DSA, default RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. key size to 2048-bit, and ChaCha20 nonce length enforcement.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.1c https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.1.1c

    • Adds enable-buildtest-c++ option to enable C++ header inclusion build tests
    • Enables SHA3 pre-hashing for ECDSA and DSA signatures
    • Changes the default RSA, DSA and DH key size to 2048 bits when using genpkey without a specified size
    • Adds EVP_PKEY_get0_engine() accessor function

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The default RSA, DSA and DH key size is now 2048 bits when using the genpkey command without a specified size
56. 1.1.0j Nov 20, 2018 · release notes

    OpenSSL 1.1.0j introduces new side-channel attack countermeasures for DSA and ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace. algorithms, including coordinate blinding support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.0j https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.1.0j

    • Coordinate blinding for EC_POINT is now implemented.

    1 detail in Everything

57. 1.1.1 Sep 11, 2018 · release notes

    OpenSSL 1.1.1 adds TLSv1.3 support, SM2/SM3/SM4/ARIA algorithms, OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists. multi-process responder, and SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address. default to s_client

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.1 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.1.1

    • Adds SSL_CTX_set_ciphersuites() and SSL_set_ciphersuites() API for TLSv1.3 ciphersuite configuration
    • Adds support for X448 and Ed448 curves and openssl passwd SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data./SHA512 output via the -aes256 or similar algorithm flags (implied by SHA256/SHA512 based output description)
    • Adds -multi <N> option to ocsp command to spawn N child processes for OCSP responder mode
    • Adds SNI extension sending to s_client by default (overridden by -noservername)
    • Adds SM2, SM3, SM4 algorithm support and ARIA AEAD TLS support

    +10 more show less

    • Adds SHA-3 (SHA3) algorithm support
    • Adds Maximum Fragment Length TLS extension negotiation support (RFC6066)
    • Adds support for SipHash
    • Adds multi-prime RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. (RFC 8017) support
    • Adds OSSL_STORE_expect() and OSSL_STORE_find() APIs to extend OSSL_STORE search capabilities
    • Adds devcrypto engine for hardware crypto acceleration on BSD/Linux
    • Adds new public header <openssl/rand_drbg.h> documenting the RAND_DRBG API
    • Enforces stricter certificate time validation (RFC 5280) in X509_cmp_time
    • Changes default behavior of ocsp responder to log via syslog(3) in -multi mode
    • Adds ERR_clear_last_mark() function to clear the last error mark without clearing errors

    15 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !TLSv1.3 ciphersuites are separated from TLSv1.2 configuration; legacy TLSv1.2 config may inadvertently disable TLSv1.3 if not explicitly configured via SSL_CTX_set_ciphersuites()
    • !Heartbeat support removed, changing the ABI
    • !QNX support removed
    • !TLSv1.0/1.1 will fail if an unrecognised record type is received
    • !Fragmented SSL/TLS alerts are no longer accepted
    • !Certificate time validation in X509_cmp_time no longer allows fractional seconds or timezone offsets
    • !SSL_MODE_AUTO_RETRY is enabled by default, potentially causing hangs with blocking I/O and select/poll (can be disabled via SSL_CTX_clear_mode())
58. 1.1.0h Mar 27, 2018 · release notes

    OpenSSL 1.1.0h adds build_all_generated target and backports SSL_OP_NO_RENEGOTIATION

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.0h https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.1.0h

    • Adds build_all_generated to prepare generated files on a system with tools such as Perl, before completing the build on another system.
    • Adds SSL_OP_NO_RENEGOTIATION option to disable TLS renegotiation

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The OS390-Unix config target has been removed.
59. 1.1.0 Aug 25, 2016 · release notes

    OpenSSL 1.1.0 introduces opaque APIs, async I/O, pipeline encryption, unified build system, and new crypto primitives.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.1.0

    • Adds OPENSSL_WIN32_UTF8 environment variable to enable UTF-8 arguments on Windows.
    • Adds support for HKDF via the EVP interface.
    • Adds support for blake2b and blake2s hash algorithms.
    • Adds the AFALG engine to offload AES128-CBC work to the Linux kernel.
    • Enables pipeline processing for ciphers supporting EVP_CIPH_FLAG_PIPELINE via libssl.

    +8 more show less

    • Adds ASYNC_start_job() and SSL_MODE_ASYNC support for asynchronous cryptographic operations.
    • Introduces opaque EC_KEY_METHOD, DH_METHOD, RSA_METHOD, DSA_METHOD, and BIO_METHOD structures with new constructor/destructor APIs.
    • Adds ASN1_EMBED macro to embed ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses..1 structures within a parent struct without allocation.
    • Adds support for OCB block cipher mode via the EVP interface.
    • Supports setting minimum and maximum protocol versions using SSL_set_min_proto_version() and SSL_set_max_proto_version().
    • Adds HTTP GET support to the ocsp command line tool.
    • Adds NSS output format to the sess_id command line tool for session export.
    • New unified build system replaces the old Makefile-based configuration, using build.info files and configdata.pm.

    13 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The STACK and LHASH API prefixes are renamed to OPENSSL_SK_ and OPENSSL_LH_.
    • !The INSTALL_PREFIX Makefile variable is renamed to DESTDIR.
    • !Configure options --install_prefix is removed.
    • !Heartbeat support for TLS is disabled by default; configure with enable-heartbeats to re-enable.
    • !Many global cleanup functions (e.g. EVP_cleanup(), SSL_COMP_free_compression_methods()) are deprecated and become no-ops.
    • !Deprecated interfaces are hidden by default; applications must define OPENSSL_USE_DEPRECATED or use the enable-deprecated config option to access them.
    • !Support for disabling TLS 1.2 in the OpenSSL TLS client at compile time via OPENSSL_NO_TLS1_2_CLIENT is removed.
    • !The ssl23.h header file is removed.
    • !Export grade static DH ciphersuites EXP-DH-RSA-DES-CBC-SHA and EXP-DH-DSS-DES-CBC-SHA are removed.
60. 1.0.1t May 3, 2016 · release notes

    OpenSSL 1.0.1t modifies ALPN callback timing and removes LOW ciphers from DEFAULT list.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.1t https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.1t

    • Modify behavior of ALPN to invoke callback after SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address./servername callback, such that updates to the SSL_CTX affect ALPN.
    • Remove LOW from the DEFAULT cipher list. This removes singles DES from the default.

    2 details in Everything

61. 1.0.2g Mar 1, 2016 · release notes

    OpenSSL 1.0.2g disables weak ciphers and SSLv2 by default, introduces SRP_VBASE_get1_by_user API

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.2g https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.2g

    └──▷ USE IT
    Allow SSLv2 negotiation through SSLv23_method() when OpenSSL was built with enable-ssl2; this does not restore removed weak SSLv2 ciphers.
    c copy

    SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2);

    • Adds SRP_VBASE_get1_by_user to handle the fake-user seed with caller-owned return values; callers must free the result.

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !SSLv2 is disabled by default in builds unless configured with enable-ssl2
    • !EXPORT and LOW strength ciphers are removed from default builds unless configured with enable-weak-ssl-ciphers
62. 1.0.2b Jun 11, 2015 · release notes

    This release addresses five security vulnerabilities (CVE-2015-1788 through CVE-2015-1792) including infinite loops and crashes in ECParameters, X509_cmp_time, PKCS7 parsing, CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly. verification, and ticket handling. It also hardens ECDH curve selection.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.2b https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.2b

    • Enforces a minimum of 256-bit elliptic curves for the ecdh_auto server setting and client default, preferring P-256 among supported curves.

    1 detail in Everything

63. 1.0.2 Jan 22, 2015 · release notes

    OpenSSL 1.0.2 adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. 1.2, Suite B TLS modes, SSL_CONF API, and new s_client/s_server CLI options.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.2 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.2

    └──▷ USE IT
    Configure OpenSSL to use only Suite B 128-bit ciphersuites via the cipherstring.
    config copy

    "SUITEB128"

    • Add support for the SignedCertificateTimestampList certificate and OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists. response extensions from RFC6962
    • Support for DTLS 1.2 with DTLSv1_2_method() and DTLS_*_method() APIs
    • New Suite B modes for TLS code using SUITEB128, SUITEB192 or SUITEB128ONLY cipherstring
    • Extend RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. OAEP support via EVP_PKEY API with options to specify digest, MGF1 digest and OAEP label
    • Add EVP support for key wrapping algorithms including AES and DES3 with EVP_CIPHER_CTX_WRAP_ALLOW flag

    +8 more show less

    • SSL_CONF* functions provide a common framework for application configuration using configuration files or command lines
    • New options -brief for s_client and s_server to print out a brief summary of connection parameters
    • New option -crl_download in several openssl utilities to download CRLs from CRLDP extension in certificates
    • New options -CRL and -CRLform for s_client and s_server for CRLs
    • New function X509_CRL_diff to generate a delta CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live. from the difference of two full CRLs with support in crl utility
    • SSL/TLS tracing code parses out SSL/TLS records using message callback and prints results, enabled by compile option enable-ssl-trace and new s_client/s_server options
    • New functions EC_curve_nist2nid and EC_curve_nid2nist which convert between NIDs and the more common NIST names such as P-256
    • Support for automatic EC temporary key parameter selection via SSL_CTX_set_ecdh_auto(ctx, 1)

    13 details in Everything

64. 1.0.0o Oct 15, 2014 · release notes

    OpenSSL 1.0.0o adds TLS_FALLBACK_SCSV support and stricter DigestInfo checks

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.0o https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.0o

    • Adds TLS_FALLBACK_SCSV support; clients doing fallback retries use SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV).
    • Adds additional DER-encoded DigestInfo structure checks during RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. signature verification

    2 details in Everything

65. 1.0.1j Oct 15, 2014 · release notes

    OpenSSL 1.0.1j adds TLS_FALLBACK_SCSV support via new API

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.1j https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.1j

    • Adds TLS_FALLBACK_SCSV protocol support and SSL_set_mode(s, SSL_MODE_SEND_FALLBACK_SCSV) API to client applications for fallback retry protection
    • Adds additional DigestInfo verification checks to reject improperly encoded RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. signature structures

    2 details in Everything

66. 1.0.1f Jan 6, 2014 · release notes

    OpenSSL 1.0.1f adds SSL_OP_SAFARI_ECDHE_ECDSA_BUG option to workaround Safari negotiation failures.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.1f https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.1f

    • Add option SSL_OP_SAFARI_ECDHE_ECDSA_BUG (part of SSL_OP_ALL) to avoid preferring ECDHE-ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace. ciphers with Safari on OS X 10.8..10.8.3

    1 detail in Everything

67. 1.0.1a Apr 19, 2012 · release notes

    OpenSSL 1.0.1a adds configurable TLS cipher count limit and broken-server workarounds.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.1a https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.1a

    • Adds OPENSSL_MAX_TLS1_2_CIPHER_LENGTH config option to truncate client hello ciphers for compatibility with broken servers.
    • Adds OPENSSL_NO_TLS1_2_CLIENT config option to disable TLS 1.2 client support entirely.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !TLS 1.2 SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. ciphersuites are no longer allowed in TLS 1.0 and 1.1 connections.
68. 1.0.1 Mar 14, 2012 · release notes

    OpenSSL 1.0.1 adds TLS v1.2, TLS-SRP, AES-GCMAES-GCMAES encryption in Galois/Counter Mode, which encrypts data and detects tampering in one pass. It is the default cipher for TLS and most disk and cloud encryption., Next Protocol Negotiation, SCTPSCTPA transport-layer protocol (RFC 4960) maintained by the IETF that delivers messages with optional ordering and built-in multi-homing, giving cyber tools reliable framing without TCP's head-of-line blocking., -sigopt PSS support, and FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. mode integration.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.1 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.1

    • Add support for TLS/DTLS heartbeats
    • Add TLS key material exporter from RFC 5705
    • Add DTLS-SRTP negotiation from RFC 5764
    • Add Next Protocol Negotiation, <http://tools.ietf.org/html/draft-agl-tls-nextprotoneg-00>. Can be disabled with a no-npn flag to config or Configure.
    • Specify "enable-ec_nistp_64_gcc_128" on the Configure (or config) command line to enable 64-bit optimized elliptic curves EC_GFp_nistp224_method(), EC_GFp_nistp256_method(), EC_GFp_nistp521_method()

    +16 more show less

    • New -sigopt option to the ca, req and x509 utilities.
    • Add RSA PSS signing function which generates and sets appropriate AlgorithmIdentifiers for PSS based on EVP_MD_CTX structure.
    • Support for companion algorithm specific ASN1 signing routines. New function ASN1_item_sign_ctx() signs a pre-initialised EVP_MD_CTX structure.
    • Add new algorithm specific ASN1 verification initialisation function to EVP_PKEY_ASN1_METHOD with a PSS handler.
    • Add signature printing for PSS.
    • Password based recipient info support for CMS library: implementing RFC3211
    • Split password based encryption into PBES2 and PBKDF2 functions.
    • Add RC4-MD5 and AESNI-SHA1 "stitched" implementations.
    • Add GCM support to TLS library. Some custom code is needed to split the IV between the fixed (from PRF) and explicit (from TLS record) portions. This adds all GCM ciphersuites supported by RFC5288 and RFC5289. Generalise some AES* cipherstrings to include GCM and add a special AESGCM string for GCM only.
    • Expand range of ctrls for AES GCM. Permit setting invocation field on decrypt and retrieval of invocation field only on encrypt.
    • Add HMAC ECC ciphersuites from RFC5289. Include SHA384 PRF support. As required by RFC5289 these ciphersuites cannot be used if for versions of TLS earlier than 1.2.
    • Update build system to add "fips" flag which will link in fipscanister.o for static and shared library builds embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. a signature if needed.
    • Add -attime option to openssl utilities.
    • New build option no-ec2m to disable characteristic 2 code.
    • Functions FIPS_mode_set() and FIPS_mode() which call the underlying FIPS modules versions.
    • Initial TLSv1.1 support. Add SSL_OP_NO_TLSv1_1 flag, TLSv1_1 methods, update version checking logic, add explicit IV handling, and command line options to s_client/s_server.

    21 details in Everything

69. 1.0.0 Mar 29, 2010 · release notes

    OpenSSL 1.0.0 adds CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly. utility, pkeyutl, generic key gen (genpkey/pkey), and TLS session ticket support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.0 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 1.0.0

    • Adds cms directory and cms utility for Cryptographic Message Syntax based on RFC3850/3851/3852
    • Adds -mac and -macopt options to dgst utility for experimental HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. via EVP_PKEY interface
    • Adds -sigopt option to dgst utility to use alternative signing parameters like X9.31 or PSS
    • Adds new utility genpkey for generating keys for any algorithm
    • Adds new utility pkey and pkeyparam for processing any key type

    +10 more show less

    • Adds pkeyutl utility for DSA signatures and DH key support/generation
    • Adds -servername option to openssl s_client command
    • Adds -servername_host, -cert2, -key2, and -servername_fatal options to openssl s_server command
    • Adds SSL_CTX_set_tlsext_opaque_prf_input_callback() function for opaque PRF input TLS extension
    • Adds SSL_OP_NO_TICKET option to disable RFC4507 session ticket support
    • Adds -resign and -md options to smime utility for adding signers to existing PKCS#7 structures
    • Adds -macalg option to pkcs12 utility to set alternative digest MAC
    • Adds -timeout option to ocsp utility for non-blocking OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists. request processing
    • Adds list-message-digest-algorithms and list-cipher-algorithms options to openssl utility
    • Adds list-public-key-algorithms option to openssl utility

    15 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The -subject_hash and -issuer_hash options are replaced by -subject_hash_old and -issuer_hash_old for compatibility; the default hash format for certificate directory links is now SHA1 instead of MD5, requiring c_rehash to rebuild symbolic links.
    • !PKCS#8 is now the default write format for private keys in utilities like rsa, replacing the traditional format.
70. 0.9.8m Feb 25, 2010 · release notes

    OpenSSL 0.9.8m adds secure renegotiation API, legacy connect option, and DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. buffering limits

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.8m https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.8m

    • Add ctrl macro SSL_get_secure_renegotiation_support() which returns 1 if peer supports secure renegotiation and 0 otherwise.
    • Add option SSL_OP_LEGACY_SERVER_CONNECT which will allow clients to connect and renegotiate with servers which do not support RI.
    • Implement RFC5746. Re-enable renegotiation but require the extension as needed. Replace SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION by SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION which can be set with SSL_CTX_set_options().

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The old flag SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION is removed; use SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION with SSL_CTX_set_options() instead.
71. 0.9.8l Nov 5, 2009 · release notes

    OpenSSL 0.9.8l disables SSL renegotiation by default to address CVE-2009-3555

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.8l https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.8l

    └──▷ BREAKING ON UPGRADE

    • !SSL renegotiation is now disabled by default, breaking existing connections that rely on this feature.
72. 0.9.8k Mar 25, 2009 · release notes

    OpenSSL 0.9.8k adds a new -hex option to openssl rand for hexadecimal output.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.8k https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.8k

    • New -hex flag for openssl rand to generate random bytes in hexadecimal format

    1 detail in Everything

73. 0.9.8j Jan 7, 2009 · release notes

    OpenSSL 0.9.8j adds JPAKE demo support and XMPP STARTTLSSTARTTLSA protocol command that upgrades a plaintext connection to an encrypted TLS session without changing ports, used in SMTP, IMAP, and LDAP so tools can negotiate encryption opportunistically on standard service ports. to s_client

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.8j https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.8j

    • Adds experimental-jpake configuration option to the Configure script to enable JPAKE support.
    • Enables JPAKE support in s_client and s_server for demonstration purposes.

    2 details in Everything

74. 0.9.8h May 28, 2008 · release notes

    OpenSSL 0.9.8h adds TLS session ticket callbacks, CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly. backport with enable-cms flag, and AES key wrapping functions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.8h https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.8h

    • Add enable-montasm Configure option to try the 32-bit x86 assembler implementation for Montgomery multiplication.
    • Add -DMONT_FROM_WORD___NON_DEFAULT_0_9_8_BUILD C flag to enable BN_from_montgomery_word performance improvement.
    • Add enable-cms configuration option to explicitly enable the backported CMS code.
    • Introduce TLS session ticket callback allowing applications to set TLS ticket cipher and HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. keys for key rollover.

    4 details in Everything

75. 0.9.8f Oct 11, 2007 · release notes

    OpenSSL 0.9.8f adds TLS extension debugging, SEED ciphersuites, and stricter SSL context/session handling.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.8f https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.8f

    • Adds openssl s_client -servername option to specify server hostnames
    • Adds openssl s_server -servername_host, -cert2, -key2, and -servername_fatal options for SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address. testing
    • Adds new API functions SSL_get_servername(), SSL_get_servername_type(), and SSL_set_SSL_CTX() to manage server name extensions
    • Adds new CTRL codes SSL_CTRL_SET_TLSEXT_SERVERNAME_CB, SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG, and SSL_CTRL_SET_TLSEXT_HOSTNAME for SNI callback configuration
    • Adds SEED ciphersuites (TLS_RSA_WITH_SEED_CBC_SHA, etc.) when configured with enable-seed

    +2 more show less

    • Adds TLS extension debugging callback capability to inspect client/server extensions
    • Enables server-side RFC 4507 (ticket) support by default in SSL_CTX, allowing transparent session caching via tickets

    7 details in Everything

76. 0.9.7m Feb 23, 2007 · release notes

    OpenSSL 0.9.7m adds FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. verification script mkfipsscr.pl and tightens cipher defaults

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.7m https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.7m

    • Adds the mkfipsscr.pl Perl script to generate shell scripts or batch files for running algorithm test programs
    • Includes "!eNULL" in SSL_DEFAULT_CIPHER_LIST to prevent authentication-only ciphersuites from being enabled by strings like "DEFAULT:RSA"

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !SSL_DEFAULT_CIPHER_LIST now includes !eNULL so strings such as DEFAULT:RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. cannot enable authentication-only ciphersuites.
77. 0.9.8e Feb 23, 2007 · release notes

    OpenSSL 0.9.8e adds RFC 3779RFC 3779An IETF standard that adds IP address and AS number extensions to X.509 certificates, letting systems cryptographically prove they hold the right to originate specific address blocks — the basis of RPKI. support and protocol emulation extensions

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.8e https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.8e

    • Adds RFC 3779 support for resource allocation in certificates
    • Extends s_client SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. and IMAP protocol emulation to use EHLO or CAPABILITY handshake

    2 details in Everything

78. 0.9.8c Sep 5, 2006 · release notes

    OpenSSL 0.9.8c adds AES IGE/biIGE modes and configurable Camellia cipher support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.8c https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.8c

    • enable-camellia configure option allows building with Camellia symmetric ciphers (128/192/256-bit) and TLS ciphersuites from RFC 4132
    • Adds AES IGE and biIGE modes to the cipher library

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Disables ECCdraft ciphersuites more thoroughly, preventing their implicit activation via aliases like AES
    • !Disables specific SSLv2 and SSLv3/TLSv1 ciphersuites including RC4-64-MD5 and EXP1024-RC2/RC4 variants
79. 0.9.8b May 4, 2006 · release notes

    OpenSSL 0.9.8b adds opaque EVP_CIPHER_CTX handling and explicit cipher suite matching

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.8b https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.8b

    • Adds EVP_CIPHER_CTX_new() and EVP_CIPHER_CTX_free() for opaque context management
    • Supports explicit single-cipher-suite matching in cipher rules
    • Adds --with-zlib-include and --with-zlib-lib Configure options for Windows zlib linking

    3 details in Everything

80. 0.9.7h Oct 11, 2005 · release notes

    OpenSSL 0.9.7h introduces constant-time RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it./DSA/DH operations and fixes a man-in-the-middle vulnerability.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.7h https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.7h

    • Adds BN_FLG_EXP_CONSTTIME flag to enable constant-time modular exponentiation for RSA, DSA, and DH private-key operations
    • Enables default use of fixed-window constant-time mod_exp for RSA, DSA, and DH private-key operations via the new BN_mod_exp_mont_consttime() implementation
    • Changes SSLv23 client method to use SSL 3.0/TLS 1.0 Client Hello format when SSL_OP_NO_SSLv2 is set
    • Adds support for smime-type MIME parameter in S/MIMES/MIMEAn email encryption and signing standard that uses X.509 certificates to authenticate senders and protect message contents; cyber tools use it to verify identity and enforce confidentiality over standard mail protocols. messages

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !SSL_OP_MSIE_SSLV2_RSA_PADDING no longer disables the SSL 2.0 server countermeasure against protocol-version rollback attacks.
81. 0.9.8 Jul 5, 2005 · release notes

    OpenSSL 0.9.8 adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. support, EC/ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace. cryptography, policy-aware X.509X.509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. verification, and new engine auto-loading.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.8 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.8

    • Add -utf8 command line option to the ca utility for handling UTF-8 subject fields
    • Add -selfsign flag to openssl ca to create self-signed certificates that are stored in the CA database
    • Enable new unique_subject = no configuration keyword in the CA section to allow duplicate subject names in the index file
    • Support IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. addresses in certificate extensions using RFC1884 format syntax
    • Add support for generating multi-valued AVAs in req and dirName config sections using '+' notation

    +4 more show less

    • Implement new X509_VERIFY_PARAM structure with policy checking capabilities for standard verification code
    • Add new EC_GROUP_new_by_curve_name() function to retrieve named elliptic curves by OIDs from X9.62, SECG, and WAP/WTLS
    • Add openssl ecparam and openssl ecdsa CLI utilities alongside full ECDSA cryptography support
    • Enable new ENGINE framework auto-loading from /usr/local/ssl/engines or the OPENSSL_ENGINES environment variable

    9 details in Everything

82. 0.9.7g Apr 11, 2005 · release notes

    Adds proxy certificate support per RFC 3820

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.7g https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.7g

83. 0.9.7f Mar 22, 2005 · release notes

    OpenSSL 0.9.7f adds -passin to dgst command, Cygwin randomness support, and stricter X509X509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. validation checks.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.7f https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.7f

    • Adds the -passin argument to the dgst command for passphrase input control
    • Switches Cygwin builds to use Windows randomness collection instead of default sources

    2 details in Everything

84. 0.9.7e Oct 25, 2004 · release notes

    OpenSSL 0.9.7e adds Delta CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live. support and sk_is_sorted() stack function

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.7e https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.7e

    • Adds sk_is_sorted() function to the STACK API for verifying sorted order.
    • Adds Delta CRL support in the extension code.

    2 details in Everything

85. 0.9.7d Mar 17, 2004 · release notes

    OpenSSL 0.9.7d adds unique_subject CA config option and md EVP flag for performance.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.7d https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.7d

    • Adds support for multiple active certificates with the same subject in the CA index when unique_subject is set to no in the main CA configuration section.
    • Introduces the EVP_MD_CTX_FLAG_REUSE flag to allow md_data reuse in EVP_MD_CTX_copy_ex(), improving HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. performance.

    2 details in Everything

86. 0.9.7c Sep 30, 2003 · release notes

    OpenSSL 0.9.7c adds -ignore_err to OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists. tool and improves TLS/ASN1 compliance

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.7c https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.7c

    • ssl3_accept() now only accepts a client certificate if the server requested one, per TLS 1.0/SSL 3.0 specs
    • ssl3_get_client_hello() tolerates extra data after compression methods for SSL 3.0 (spec compliance)
    • AES_cbc_encrypt() now outputs an exact multiple of blocks during encryption

    3 details in Everything

87. 0.9.6j Apr 10, 2003 · release notes

    OpenSSL 0.9.6j enables RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. blinding by default and adds RSA_FLAG_NO_BLINDING flag

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.6j https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.6j

    • Enables RSA blinding by default to mitigate timing attacks on RSA operations.
    • Adds the RSA_FLAG_NO_BLINDING flag for applications that explicitly need to disable RSA blinding.
    • Updates RSA bliding implementation to function correctly even when the PRNG is not yet seeded.

    3 details in Everything

88. 0.9.7b Apr 10, 2003 · release notes

    OpenSSL 0.9.7b adds default RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. blinding, RSA_FLAG_NO_BLINDING support, and MinGW mingw target fix

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.7b https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.7b

    • Turns on RSA blinding by default to mitigate timing attacks, with a new RSA_FLAG_NO_BLINDING flag to disable it.
    • Improves RSA blinding to function correctly even when the PRNG is not seeded initially.

    2 details in Everything

89. 0.9.7a Feb 19, 2003 · release notes

    OpenSSL 0.9.7a adds SSL_MODE_NO_AUTO_CHAIN, no-err option control, FreeBSD IA64/sparc64 support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.7a https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.7a

    • SSL_MODE_NO_AUTO_CHAIN flag to disable automatic SSL certificate chain building.
    • no-err option now controls error text footprint in libcrypto without removing routines.
    • Support for FreeBSD on IA64 architecture.
    • Support for FreeBSD on sparc64 architecture.

    4 details in Everything

90. 0.9.7 Dec 31, 2002 · release notes

    OpenSSL 0.9.7 adds OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists. responder and client support, elliptic curve framework, AES ciphersuites, and ENGINE config module.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.7 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.7

    • Adds the ocsp utility to generate OCSP requests, query responders, and parse responses
    • Introduces new CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live.-based revocation checking via X509_STORE callbacks
    • Adds support for AES (Rijndael) ciphersuites in TLS, including ECB, CBC, CFB, OFB, and CTR modes
    • Adds framework for elliptic curves (EC_GROUP, EC_POINT) with GF(p) methods
    • Introduces config module support in the openssl utility with engine loading from config files

    +19 more show less

    • Adds default_algorithms option to ENGINE config module to specify which algorithms an engine accelerates
    • Adds -pre and -post switches to openssl engine for executing control commands via CLI arguments
    • Adds -subj argument to req and ca utilities to set or override the subject name directly on the command line
    • Adds -set_serial option to req and x509x509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. utilities to specify a custom serial number for certificates
    • Adds copy_extensions option to the ca utility to copy extensions from a certificate request to the issued certificate
    • Adds -extfile option to openssl ca for reading X.509v3 extensions from a separate configuration file
    • Adds SSL_CTX_set_msg_callback() and SSL_set_msg_callback() APIs for protocol message inspection
    • Adds -msg option to s_client and s_server to display all protocol messages via callbacks
    • Adds -multi and -mr options to openssl speed for multiple parallel runs and machine-readable output respectively
    • Adds dynamic ENGINE support allowing self-contained shared-libraries to be loaded as engines
    • Adds ERR_unload_strings() function to unload ranges of error strings
    • Adds OCSP_check_validity() and OCSP_copy_nonce() functions for OCSP response validation
    • Adds EVP_Digest() convenience function combining init, update, and final operations
    • Adds SSL_OP_CIPHER_SERVER_PREFERENCE option to allow servers to override client cipher preferences
    • Adds new error codes ERR_R_INTERNAL_ERROR, ERR_R_NESTED_ASN1_ERROR, etc., with renumbered ranges
    • Adds ASN1_ITEM_FUNCTIONS compilation option for platforms where exporting structures is problematical
    • Adds EXPORT_VAR_AS_FN configuration support for handling global variables in shared libraries on Windows
    • Adds -VAfile option to openssl ocsp to specify certificates for verifying the response signature
    • Adds -url option to ocsp utility to parse OCSP URLs into host, port, and path components

    24 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The des_ functions are renamed to DES_; the old names are only available via _ossl_old_des_* wrappers or if OPENSSL_DES_LIBDES_COMPATIBILITY is defined.
    • !Key loading routines for ENGINEs now take a UI_METHOD instead of a callback function pointer, breaking binary compatibility with earlier versions of OpenSSL [engine].
91. 0.9.6h Dec 5, 2002 · release notes

    Adds OPENSSL_cleanse() memory clearing function and SSL_SESS_CACHE_NO_INTERNAL flag.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.6h https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.6h

    • Adds OPENSSL_cleanse() function to clear memory with alternating values, preventing compiler optimization of memset calls
    • Adds SSL_SESS_CACHE_NO_INTERNAL_STORE and defines SSL_SESS_CACHE_NO_INTERNAL as its bitwise OR with SSL_SESS_CACHE_NO_INTERNAL_LOOKUP.

    2 details in Everything

92. 0.9.6e Jul 30, 2002 · release notes

    Adds SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS to disable the CBC empty-fragment countermeasure for compatibility with broken SSL implementations.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.6e https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.6e

93. 0.9.6c Dec 21, 2001 · release notes

    OpenSSL 0.9.6c adds crypto engine support for multiple accelerators and BN_pseudo_rand_range().

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.6c https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.6c

    • Adds keyclient engine for Cryptographic Appliances keyserver technology
    • Adds sureware engine for SureWare crypto accelerator cards from Baltimore Technologies
    • Adds aep engine for crypto accelerator cards from Accelerated Encryption Processing
    • Adds BN_pseudo_rand_range() function equivalent to BN_rand_range() but based on BN_pseudo_rand()

    4 details in Everything

94. 0.9.6a Apr 5, 2001 · release notes

    OpenSSL 0.9.6a adds ssl23_peek, -rand CLI option, and improved session reuse.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.6a https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.6a

    • Implements ssl23_peek function to allow reading data without removing it from the buffer, analogous to ssl23_read.
    • Adds -rand option to s_client and s_server CLI commands for entropy source specification.
    • Makes SSLv2 sessions reusable via changes to session handling logic in the library.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Shared libraries now use full version numbers in internal names, marking them as not backward compatible.
95. 0.9.6 Sep 24, 2000 · release notes

    OpenSSL 0.9.6 adds rsautl utility, TLS rollback bug option, ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses..1 dump, EGD control, and new API for certs and config.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.6 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.6

    • Adds the rsautl application for low-level RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. operations
    • Adds SSL mode SSL_MODE_AUTO_RETRY to disable WANT_READ during handshake in blocking transports
    • Adds RAND_egd_bytes() to control bytes read from EGD
    • Adds new BIOBIOA BIOS-level firmware interface standard maintained by UEFI Forum that abstracts hardware initialisation, giving cyber tools a consistent way to interact with pre-boot environments across vendors. filter function BIO_f_linebuffer() on VMS
    • Adds new configure option reconf or reconfigure to reuse previous arguments

    +14 more show less

    • Adds -1 flag to openssl passwd for BSD-style MD5-based passwords
    • Adds -rand file argument to openssl req to extend the PRNG seed
    • Adds -tls1 option to openssl ciphers utility
    • Adds -inform, -outform, and -content options to the smime application
    • Adds -CAfile and -CApath arguments to the pkcs12 utility
    • Adds new ASN.1 printing functions ASN1_STRING_print_ex() and X509_NAME_print_ex() with RFC2253 support
    • Adds hexdumps of unprintable data via asn1parse using ASN1_parse_dump() and BIO_dump_indent()
    • Adds CONF_set_default_method() to set the default configuration file reader class
    • Adds initial DSO code for loading shared libraries portably
    • Adds -sgckey command line option to the rsa utility for Netscape-style key derivation
    • Adds X509_get1_email() and X509_REQ_get1_email() functions returning email stacks from certificates or requests
    • Adds ERR_error_string_n(e, buf, len) which writes at most len bytes including the null terminator
    • Adds new PKCS#7 signing option PKCS7_NOSMIMECAP to exclude S/MIMES/MIMEAn email encryption and signing standard that uses X.509 certificates to authenticate senders and protect message contents; cyber tools use it to verify identity and enforce confidentiality over standard mail protocols. capabilities
    • Allows verification time to be set by an application rather than using current time

    19 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The STACK implementation is reorganized into safestack.h; internal manipulation of X509_STORE now breaks if code bypassed the public API.
96. 0.9.5a Apr 1, 2000 · release notes

    New no-XXX pseudo-command for CLI detection, -ign_eof for s_client, rand application, and -dsaparam for dhparam.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.5a https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.5a

    • Adds openssl no-<command> pseudo-command to check if a subcommand exists at runtime
    • Adds -ign_eof option to s_client to ignore stdin EOF without suppressing output
    • Introduces rand application for generating pseudo-random output
    • Adds -dsaparam option to dhparam application to generate DH parameters from DSA parameters

    4 details in Everything

97. 0.9.5 Feb 28, 2000 · release notes

    OpenSSL 0.9.5 adds EGD support, passwd tool, X509at API, chain verification, and strength-sorted ciphers.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.5 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.5

    • RAND_egd() and RAND_status() functions for External Data Generator seeding; CLI uses RANDFILE or -rand to specify the EGD socket.
    • New passwd command-line tool for generating crypt(3) and apr1 password hashes.
    • New X509at_*() API functions for handling certificate attributes, replacing the older X509_*() set.
    • @STRENGTH cipher sorting syntax in s_server/s_client for ordering ciphers by strength_bits.
    • -purpose flag added to verify utility to enable initial certificate chain verification and trust checking.

    +1 more show less

    • New -pubkey option to spkac application.

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !SSLeay_add_all_*() functions renamed to OpenSSL_add_all_*(); old names remain only via #define.
    • !X509_ATTRIBUTE utility macros prefixed with M_ (e.g. X509at_*); external code should use function equivalents.
    • !Default cipher list now excludes anonymous DH ciphers (SSL_ALLOW_ADH compile option removed).
98. 0.9.4 Aug 9, 1999 · release notes

    OpenSSL 0.9.4 adds DSA_dup_DH, PKCS#8 app, BIOBIOA BIOS-level firmware interface standard maintained by UEFI Forum that abstracts hardware initialisation, giving cyber tools a consistent way to interact with pre-boot environments across vendors. pairs, and new RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it./DH functions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.4 https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.4

    • Adds DSA_dup_DH() function to duplicate DSA parameters as DH parameters for efficient DHE ciphersuites
    • Adds -check option to openssl rsa command via new RSA_check_key() function for verifying RSA key consistency
    • Adds pkcs8 application with -v2 cipher option for PKCS#5 v2.0 password-based encryption and secure private key export
    • Adds BIO pair concept (bss_bio.c) allowing SSL library use without specific BIO types via new BIO_new(BIO_s_bio()) pattern
    • Adds CONF_load_bio() and CONF_load_fp() functions to load config from BIO or FILE pointer

    +5 more show less

    • Adds support for SPARC Linux platform configuration
    • Allows -k option to be used multiple times in the enc program for multi-recipient encryption
    • Adds RSA_FLAG_EXT_PKEY flag and RSA_get_default_method()/RSA_set_method() functions to replace RSA_METHODs without internal structure manipulation
    • Adds PKCS7_signatureVerify() function for verifying PKCS#7 signatures with an externally provided signing certificate
    • Adds -DCRYPTO_MDEBUG_TIME and -DCRYPTO_MDEBUG_THREAD build flags to store allocation time and thread ID in memory debug output

    10 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The pem_password_cb function signature changed from (char *buf, int size, int rwflag) to (char *buf, int size, int rwflag, void *userdata), and corresponding PEM[_ASN1]_{read,write}... macros now take an additional void * argument
    • !The EVP_PBE_CipherInit() function signature changed to accept a parameter argument instead of literal salt and iteration count values; EVP_PBE_ALGOR_CipherInit() has been deleted
99. 0.9.3a May 29, 1999 · release notes

    Adds the sco5-gcc configuration variant and includes platform fixes.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.9.3a https://github.com/openssl/openssl.git
    # already have the repo? check out this version:
    $ git checkout 0.9.3a

100. 0.9.3 May 24, 1999 · release notes

     OpenSSL 0.9.3 adds openssl pkcs12 CLI app, sk_* API functions, and new Configure flags

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch 0.9.3 https://github.com/openssl/openssl.git
     # already have the repo? check out this version:
     $ git checkout 0.9.3

     • Adds openssl pkcs12 application for PKCS#12PKCS#12A file format standard from RSA Labs, now maintained under IETF, that bundles a private key, certificate, and chain into one encrypted container, letting cyber tools ship or load credentials as a single portable file. management.
     • Adds sk_num, sk_value, and sk_set functions to replace STACK macros in the library.
     • Adds SSL_CTX_use_certificate_chain_file function to load certificate chains from PEM files.
     • Adds openssl ca -revoke <certfile> command to revoke certificates by updating index.txt.
     • Adds no-<cipher> Configure option (e.g., no-rsa) to exclude specific ciphers at build time.

     +8 more show less

     • Adds -out option to asn1parse command for outputting parsed structures to a file.
     • Adds -showcerts option to s_client to display the full certificate chain.
     • Adds support for setting PKCS#12 passwords via command line or environment variables.
     • Adds OPENSSL_CONF and SSLEAY_CONF environment variable support for config file paths in ca utility.
     • Adds --prefix=DIR and --openssldir=DIR Configure options.
     • Adds threads and no-threads Configure options for systems with known compiler thread support.
     • Adds rsaref Configure option.
     • Adds openssl list-cipher-commands command (undocumented) to list available ciphers for testing.

     13 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !ssl_cert_instantiate is obsolete; code must use SSL_new and context assignment instead of copying pointers from SSL_CTX.
     • !Code using direct access to STACK.num or STACK.data members now produces warnings or errors; use sk_num and sk_value API functions instead.
     • !Assigning values via sk_value(x, i) = y no longer works; use the new sk_set function.
101. 0.9.2b Mar 22, 1999 · release notes

     OpenSSL 0.9.2b adds per-connection SSL_CTX functions, PKCS#7/CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live. extension support, and new crypto primitives.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch 0.9.2b https://github.com/openssl/openssl.git
     # already have the repo? check out this version:
     $ git checkout 0.9.2b

     • Adds ssl/ssl_lib.c and ssl/ssl.h with new SSL_need_tmp_rsa(), SSL_set_tmp_rsa(), SSL_set_tmp_dh(), SSL_set_tmp_rsa_callback() and SSL_set_tmp_dh_callback() API to configure temporary RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it./DH keys on a per-connection basis, fixing the no shared cipher problem for DSA certificates in multi-context servers.
     • Adds support for native Solaris shared libraries via the new configure target solaris-sparc-sc4-pic and script shlib/solaris-sc4.sh.
     • Permits extensions to be added to CRLs using the crl_section in openssl.cnf, specifically supporting issuerAltName and AuthorityKeyIdentifier.
     • Adds support for new TLS ciphersuites: TLS_RSA_EXPORT56_WITH_RC4_56_MD5, TLS_RSA_EXPORT56_WITH_RC2_CBC_56_MD5 and TLS_RSA_EXPORT56_WITH_DES_CBC_SHA.
     • Adds OAEP (Optimal Asymmetric Encryption Padding) encryption for the OpenSSL crypto library, recommended in PKCS #1 v2.0 (RFC 2437).

     +4 more show less

     • Adds support for RAW extensions where an arbitrary extension can be created by including its DER encoding, with example configuration in apps/openssl.cnf.
     • New program nseq to manipulate netscape certificate sequences and ASN1/PEM code to support them.
     • Adds Arne Ansper's reliable BIOBIOA BIOS-level firmware interface standard maintained by UEFI Forum that abstracts hardware initialisation, giving cyber tools a consistent way to interact with pre-boot environments across vendors. (crypto/evp/bio_ok.c) which is an encrypted, block-digested BIO, and a syslog/event log BIO.
     • Changes the meaning of ALL in the cipher list to mean "everything except NULL ciphers", preventing NULL ciphers by default.

     9 details in Everything

     └──▷ BREAKING ON UPGRADE

     • !The meaning of ALL in the cipher list changes from "everything including NULL ciphers" to "everything except NULL ciphers", so DEFAULT cipher lists no longer enable NULL ciphers.
102. 0.9.1c Dec 23, 1998 · release notes

     OpenSSL 0.9.1c introduces RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it.-free build option and new platform support.

     └──▷ GET THIS VERSION

     copy

     $ git clone --branch 0.9.1c https://github.com/openssl/openssl.git
     # already have the repo? check out this version:
     $ git checkout 0.9.1c

     • Incorporates no-RSA/DSA-only patches that allow an RSA-free build.
     • Adds Cray T3E and HPUX 11 to Configure platform list
     • Adds OPENSSL_VERSION_NUMBER macro to crypto/crypto.h

     3 details in Everything