OpenSSL 1.1.1 is out!

OpenSSL 1.1.1 is out!

Postby EKjellquist » Wed Sep 19, 2018 6:59 pm

As of 9/11, OpenSSL 1.1.1 is in final release. I realize AMS and AFS will probably eventually support it, but being able to utilize TLS 1.3 / SHA3 / ECC certificates would really get me to upgrade quicker, and given several months it's going to be a necessity.

https://www.openssl.org/blog/blog/2018/ ... elease111/
EKjellquist
 
Posts: 89
Joined: Tue Sep 09, 2014 10:40 pm

Re: OpenSSL 1.1.1 is out!

Postby Code Crafters » Fri Sep 21, 2018 8:09 am

We'll try to upgrade to this version. However, moving from 1.0.x to 1.1.x is major update and requires a rewrite of most of our SSL code which is why we haven't done it already. We recently had to downgrade from 1.0.2o back to 1.0.2L due to instabilities in OpenSSL and generating certificates not working. The latest is 1.0.2p in that series. As you say 1.1.1 is the latest in the new series and we'll try to move to that when we can.
Code Crafters
 
Posts: 933
Joined: Mon Sep 10, 2007 2:35 pm

Re: OpenSSL 1.1.1 is out!

Postby EKjellquist » Thu Oct 24, 2019 7:05 pm

OpenSSL 1.0.2 appears to be out of support as of 12/31/19, and we're getting dinged here and there as far as PCI checks go for older versions of OpenSSL; We're using 1.1.1d on Apache and everywhere else we can at the moment..

Any word on when TLS 1.3 / OpenSSL 1.1.1x will be supported I'm guessing that's coming in v5? Any info on that would be appreciated..Eventually the winds will be shifting away from TLS 1.2 also and I'd rather be on the front end of that with AMS/AFS..

https://www.openssl.org/source/
EKjellquist
 
Posts: 89
Joined: Tue Sep 09, 2014 10:40 pm

Re: OpenSSL 1.1.1 is out!

Postby EKjellquist » Tue May 16, 2023 2:42 pm

So, we're at the point where OpenSSL 1.1.1's EoL date is 9/11/23, OpenSSL 3.0 LTS will be supported until 9/7/26, and OpenSSL 3.1 is their currently-supported release

https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/

Can we expect a new AMS version that will at least support 3.x soon? Clock is ticking on TLS 1.2 support as it is, and OpenSSL 1.0.2 has been out of support for years....
EKjellquist
 
Posts: 89
Joined: Tue Sep 09, 2014 10:40 pm

Re: OpenSSL 1.1.1 is out!

Postby Code Crafters » Wed May 17, 2023 8:53 am

DKIM is the next feature to be added, followed by the OpenSSL update. Both of these are big updates which is why they haven't already been added but they are our highest priority for big new features.
Code Crafters
 
Posts: 933
Joined: Mon Sep 10, 2007 2:35 pm

Re: OpenSSL 1.1.1 is out!

Postby therentabrain » Fri May 19, 2023 1:02 am

If I purchase AMS today, will that TLS upgrade be included when it's ready?
therentabrain
 
Posts: 16
Joined: Fri Mar 03, 2017 10:45 am

Re: OpenSSL 1.1.1 is out!

Postby Code Crafters » Fri May 19, 2023 8:31 am

You get 1 year of updates and support. If the update is within the next year it will be included. No definite release date on this feature though yet.
Code Crafters
 
Posts: 933
Joined: Mon Sep 10, 2007 2:35 pm

Re: OpenSSL 1.1.1 is out!

Postby Code Crafters » Thu Sep 07, 2023 8:04 am

We've updated to OpenSSL 3.1.2 and added support for TLS 1.3 in the latest version 5.1.0.

Please see https://www.codecrafters.com/AbilityMai ... ateHistory for full details of this release.
Code Crafters
 
Posts: 933
Joined: Mon Sep 10, 2007 2:35 pm


Return to Suggestions

Who is online

Users browsing this forum: No registered users and 1 guest

cron