OpenSSL 4.1.0

Razengan

> Dropped Windows-on-Itanium A sad day. End of an era *salute*

haunter

> Dropped Windows-on-Itanium (VC-WIN64I) and Windows CE (VC-CE) targets from Configurations. What a throwback. afaik Windows Server 2008 R2 had Itanium updates until 2020 and paid support until this year. Pretty good run to say at least

hannob

I don't see "we fixed some of the the excessive performance regressions that we introduced in 3.0". Unfortunate... Context: https://cryptography.io/en/latest/statements/state-of-openss...

snvzz

Mandatory reminder libressl[0] exists. 0. https://www.libressl.org/

amelius

Was it verified by AI? (Not a strange question given the recent PHP vulns found by AI.)

adzm

I think this is the only software project I use that still requires me to have perl

owenthejumper

I think it's too little too late, people have started moving on https://www.haproxy.com/blog/state-of-ssl-stacks

ksec

I wonder what is the current marketshare of Libressl and OpenSSL ?

aftbit

Wait, OpenSSL didn't support GREASE until now? The RFC standard landed 6 years ago... I've been linking a lot of stuff against boringssl during that time, I suppose...

markasoftware

Interesting they're adding new support for DTLS 1.3 when afaict most new applications are defaulting to QUIC datagram mode. I have something built around DTLS 1.3 and am using wolfssl for that reason, will have to check this out.

mlhpdx

> Support for DTLS 1.3 (RFC 9147). Refer to the ossl-guide-dtlsv13(7) manual page for details. DTLS 1.3 is a huge improvement over 1.2 for efficiency and simplicity. I can’t speak to the OpenSSL implementation but it’s great that support is finally released.

ShakataGaNai

Guys, after this week, can we make sure to have more details in the title? Like "Look! Cool new OpenSSL features" so we're not PTSD'ing our way into release notes expecting it to say something about patching critical CVEs?