The OpenSSL 3.0 series has reached its End of Life (EOL). As such it will no longer receive publicly available security fixes.
Category: Blog on OpenSSL Library
The OpenSSL Library supports DTLS 1.3
OpenSSL 4.1, which will be released in October 2026 , adds the Datagram Transport Layer Security (DTLS) protocol version 1.3. Summary According to the…
OpenSSL 4.1 Alpha Release Announcement
The OpenSSL Project is pleased to announce that OpenSSL 4.1 Alpha1 pre-release is available, which adds significant new functionality to the OpenSSL…
The OpenSSL Library supports DTLS 1.3
OpenSSL 4.1, which will be released in October 2026 , adds the Datagram Transport Layer Security (DTLS) protocol version 1.3. Summary According to the…
OpenSSL 4.1 Alpha Release Announcement
The OpenSSL Project is pleased to announce that OpenSSL 4.1 Alpha1 pre-release is available, which adds significant new functionality to the OpenSSL…
Foundation Advisory Committee nominations and election (2026)
The 2026 OpenSSL Foundation Advisory Committee nomination period has started! The Foundation is looking for people who want to help guild the future of…
On the “HollowByte” denial-of-service report
Over the past week a denial-of-service (DoS) report against OpenSSL, named “HollowByte” by the Okta Red Team who reported it, has received a good deal of press attention. A number of the articles ask reasonable questions about how we assessed…
The OpenSSL Library AI Policy
The OpenSSL Library has adopted an AI policy. To summarize: Anyone who uses AI to provide a non-trivial portion of their contributions to the OpenSSL Library must: Sign an updated Contributor License Agreement (CLA) that includes the AI clauses. Declare…
Future release schedule
At ICMC26, Tim Hudson announced a change to the OpenSSL Library release schedule for future releases. Last year we committed to making long term stable (LTS) releases every two years. Following the release of 4.0, the first major release since…
OpenSSL 4.0 Final Release – Live
The final release of OpenSSL 4.0 is now live. We would like to thank all those who contributed to the OpenSSL 4.0 release, without whom the OpenSSL Library would not be possible. This article has been indexed from Blog on…
ASN1_STRING type is now opaque
Previous posts about the upcoming OpenSSL 4.0 release: removing ENGINE code removing deprecated functions for creating or modifying custom METHODS no longer registering a function via atexit function adding ECH support removing SSLv3 and SSLv2 Client Hello Summary The ASN1_STRING…
OpenSSL Release Announcement for 3.6.2, 3.5.6, 3.4.5, 3.3.7, 3.0.20, 1.1.1zg and 1.0.2zp
Release Announcement for OpenSSL Library 3.6.2, 3.5.6, 3.4.5, 3.3.7, 3.0.20, 1.1.1zg and 1.0.2zp The OpenSSL Project team announces the release of new versions of our open-source toolkit for SSL/TLS. This article has been indexed from Blog on OpenSSL Library Read…
The OpenSSL Library no longer includes SSLv3
Previous posts about the upcoming OpenSSL 4.0 release: removing ENGINE code removing deprecated functions for creating or modifying custom METHODS no longer registering a function via atexit function adding ECH support Summary Secure Sockets Layer version 3.0 (SSLv3) was deprecated…
OpenSSL 4.0 Beta Release Announcement
The OpenSSL Project is pleased to announce that OpenSSL 4.0 Beta1 pre-release is available, adding significant functionality to the OpenSSL Library. This article has been indexed from Blog on OpenSSL Library Read the original article: OpenSSL 4.0 Beta Release Announcement
The OpenSSL Library now supports Encrypted Client Hello (ECH)
Previous posts about the upcoming OpenSSL 4.0 release: removing ENGINE code removing deprecated functions for creating or modifying custom METHODS no longer registering a function via atexit function Summary The OpenSSL Library now supports Encrypted Client Hello (ECH) specified in…
The OpenSSL Library no longer registers an atexit function
Previous posts about features removed from OpenSSL 4.0: ENGINE code deprecated functions for creating or modifying custom METHODS Summary The OPENSSL_cleanup() function is no longer registered to be called upon the termination of the process. This means the OpenSSL Library…
OpenSSL 4.0 Alpha Repository Freeze Approaching
The OpenSSL Project is announcing the upcoming release of OpenSSL 4.0 Alpha, scheduled for March 10, 2026. As a result, the repository will be frozen before the release on February 24, 2026. This article has been indexed from Blog on…
Custom method functions removed from the OpenSSL Library
Following on from the removal of ENGINE code, deprecated functions for creating or modifying custom METHODS will be removed from OpenSSL 4.0. Summary For a complete list of deprecated functions removed in OpenSSL 4.0, please see the ossl-removed-api documentation. They…
OpenSSL Release Announcement for 3.6.1, 3.5.5, 3.4.4, 3.3.6, 3.0.19, 1.1.1ze and 1.0.2zn
Release Announcement for OpenSSL Library 3.6.1, 3.5 5, 3.4.4, 3.3.6, 3.0.19, 1.1.1ze and 1.0.2zn The OpenSSL Project team announces the release of new versions of our open-source toolkit for SSL/TLS. This article has been indexed from Blog on OpenSSL Library…
ENGINE code removed from the OpenSSL Library
OpenSSL 4.0, to be released in April 2026, is the first major release since 3.0 which replaced the ENGINE interface with Providers. Removing ENGINEs is a primary goal of this major release and this post describes the change agreed to…