OpenSSL 1.1.1 is out!

OpenSSL 1.1.1 is out!

Postby EKjellquist » Wed Sep 19, 2018 6:59 pm

As of 9/11, OpenSSL 1.1.1 is in final release. I realize AMS and AFS will probably eventually support it, but being able to utilize TLS 1.3 / SHA3 / ECC certificates would really get me to upgrade quicker, and given several months it's going to be a necessity.

https://www.openssl.org/blog/blog/2018/ ... elease111/
EKjellquist
 
Posts: 46
Joined: Tue Sep 09, 2014 10:40 pm

Re: OpenSSL 1.1.1 is out!

Postby Code Crafters » Fri Sep 21, 2018 8:09 am

We'll try to upgrade to this version. However, moving from 1.0.x to 1.1.x is major update and requires a rewrite of most of our SSL code which is why we haven't done it already. We recently had to downgrade from 1.0.2o back to 1.0.2L due to instabilities in OpenSSL and generating certificates not working. The latest is 1.0.2p in that series. As you say 1.1.1 is the latest in the new series and we'll try to move to that when we can.
Code Crafters
 
Posts: 872
Joined: Mon Sep 10, 2007 2:35 pm

Re: OpenSSL 1.1.1 is out!

Postby EKjellquist » Thu Oct 24, 2019 7:05 pm

OpenSSL 1.0.2 appears to be out of support as of 12/31/19, and we're getting dinged here and there as far as PCI checks go for older versions of OpenSSL; We're using 1.1.1d on Apache and everywhere else we can at the moment..

Any word on when TLS 1.3 / OpenSSL 1.1.1x will be supported I'm guessing that's coming in v5? Any info on that would be appreciated..Eventually the winds will be shifting away from TLS 1.2 also and I'd rather be on the front end of that with AMS/AFS..

https://www.openssl.org/source/
EKjellquist
 
Posts: 46
Joined: Tue Sep 09, 2014 10:40 pm


Return to Suggestions

Who is online

Users browsing this forum: No registered users and 1 guest

cron