OpenSSL 3.0 in 2020

OpenSSL 3.0 in 2020

Postby EKjellquist » Mon Dec 09, 2019 3:45 pm

Folks,

https://www.openssl.org/blog/blog/2019/ ... .0-update/

By this time next year, it sounds like OpenSSL 3.0 will be available, and it probably won't take much time for the larger PCI / NIST scanners to adopt; Going from OpenSSL 1.1.1 to 3.x isn't expected to be as much of a heavy lift as 1.0.2 to 1.1.1, just wanted to toss this out there as far as the future of AMS...
EKjellquist
 
Posts: 80
Joined: Tue Sep 09, 2014 10:40 pm

Re: OpenSSL 3.0 in 2020

Postby Code Crafters » Wed Dec 11, 2019 8:40 pm

We always aim to keep up with the latest OpenSSL versions. As you said the leap from 1.0.x to 1.1.x is a huge one requiring large code refactoring which is why we haven't yet done it. However, we definitely want to implment TLS 1.3 and all future SSL options that we can and will continue to move forward with this.
Code Crafters
 
Posts: 906
Joined: Mon Sep 10, 2007 2:35 pm

Re: OpenSSL 3.0 in 2020

Postby EKjellquist » Wed Dec 18, 2019 2:49 pm

Recently-updated OpenSSL 1.0.2u release notes, apparently this will be the final update before it goes out of support on 12/31/19..

https://www.openssl.org/news/secadv/20191206.txt
EKjellquist
 
Posts: 80
Joined: Tue Sep 09, 2014 10:40 pm

Re: OpenSSL 3.0 in 2020

Postby Code Crafters » Mon Dec 23, 2019 10:25 am

Thanks for the information. Hopefully we can implement a later version of OpenSSL next year to gain access to TLS 1.3 and the latest ciphers.
Code Crafters
 
Posts: 906
Joined: Mon Sep 10, 2007 2:35 pm

Re: OpenSSL 3.0 in 2020

Postby EKjellquist » Tue Nov 15, 2022 4:24 pm

<Bump>

We're currently running Apache 2.4.54 / PHP 8.1 and they'll continue to coexist with OpenSSL 1.0.2 ok, but pretty soon (Apache 2.4.55 / PHP 8.2) will fully support OpenSSL 3.0.x and are expected by the end of the year, so I'm wondering if AMS adding support for OpenSSL 3 is progressing? Alternatively, could we see support for OpenSSL 1.1.1 in the near future?
EKjellquist
 
Posts: 80
Joined: Tue Sep 09, 2014 10:40 pm

Re: OpenSSL 3.0 in 2020

Postby Code Crafters » Wed Nov 16, 2022 8:41 am

We know that SSL and DKIM are both upgrades that are highly requested and needed and will add them as soon as we can but have no expected release dates for these yet.
Code Crafters
 
Posts: 906
Joined: Mon Sep 10, 2007 2:35 pm


Return to General

Who is online

Users browsing this forum: No registered users and 3 guests

cron