Page 1 of 1

OpenSSL 3.0 in 2020

PostPosted: Mon Dec 09, 2019 3:45 pm
by EKjellquist
Folks,

https://www.openssl.org/blog/blog/2019/ ... .0-update/

By this time next year, it sounds like OpenSSL 3.0 will be available, and it probably won't take much time for the larger PCI / NIST scanners to adopt; Going from OpenSSL 1.1.1 to 3.x isn't expected to be as much of a heavy lift as 1.0.2 to 1.1.1, just wanted to toss this out there as far as the future of AMS...

Re: OpenSSL 3.0 in 2020

PostPosted: Wed Dec 11, 2019 8:40 pm
by Code Crafters
We always aim to keep up with the latest OpenSSL versions. As you said the leap from 1.0.x to 1.1.x is a huge one requiring large code refactoring which is why we haven't yet done it. However, we definitely want to implment TLS 1.3 and all future SSL options that we can and will continue to move forward with this.

Re: OpenSSL 3.0 in 2020

PostPosted: Wed Dec 18, 2019 2:49 pm
by EKjellquist
Recently-updated OpenSSL 1.0.2u release notes, apparently this will be the final update before it goes out of support on 12/31/19..

https://www.openssl.org/news/secadv/20191206.txt

Re: OpenSSL 3.0 in 2020

PostPosted: Mon Dec 23, 2019 10:25 am
by Code Crafters
Thanks for the information. Hopefully we can implement a later version of OpenSSL next year to gain access to TLS 1.3 and the latest ciphers.

Re: OpenSSL 3.0 in 2020

PostPosted: Tue Nov 15, 2022 4:24 pm
by EKjellquist
<Bump>

We're currently running Apache 2.4.54 / PHP 8.1 and they'll continue to coexist with OpenSSL 1.0.2 ok, but pretty soon (Apache 2.4.55 / PHP 8.2) will fully support OpenSSL 3.0.x and are expected by the end of the year, so I'm wondering if AMS adding support for OpenSSL 3 is progressing? Alternatively, could we see support for OpenSSL 1.1.1 in the near future?

Re: OpenSSL 3.0 in 2020

PostPosted: Wed Nov 16, 2022 8:41 am
by Code Crafters
We know that SSL and DKIM are both upgrades that are highly requested and needed and will add them as soon as we can but have no expected release dates for these yet.

Re: OpenSSL 3.0 in 2020

PostPosted: Thu Sep 07, 2023 8:04 am
by Code Crafters
We've updated to OpenSSL 3.1.2 and added support for TLS 1.3 in the latest version 5.1.0.

Please see https://www.codecrafters.com/AbilityMai ... ateHistory for full details of this release.

Re: OpenSSL 3.0 in 2020

PostPosted: Fri Sep 08, 2023 5:44 pm
by EKjellquist
We've updated to OpenSSL 3.1.2 and added support for TLS 1.3 in the latest version 5.1.0.


Just bought the update, seems good, CheckTLS / SSLLabs both report current TLS :D