OpenSSL 1.1.1 is out!

[EKjellquist]

As of 9/11, OpenSSL 1.1.1 is in final release. I realize AMS and AFS will probably eventually support it, but being able to utilize TLS 1.3 / SHA3 / ECC certificates would really get me to upgrade quicker, and given several months it's going to be a necessity.

https://www.openssl.org/blog/blog/2018/ ... elease111/

[Code Crafters]

We'll try to upgrade to this version. However, moving from 1.0.x to 1.1.x is major update and requires a rewrite of most of our SSL code which is why we haven't done it already. We recently had to downgrade from 1.0.2o back to 1.0.2L due to instabilities in OpenSSL and generating certificates not working. The latest is 1.0.2p in that series. As you say 1.1.1 is the latest in the new series and we'll try to move to that when we can.

[EKjellquist]

OpenSSL 1.0.2 appears to be out of support as of 12/31/19, and we're getting dinged here and there as far as PCI checks go for older versions of OpenSSL; We're using 1.1.1d on Apache and everywhere else we can at the moment..

Any word on when TLS 1.3 / OpenSSL 1.1.1x will be supported I'm guessing that's coming in v5? Any info on that would be appreciated..Eventually the winds will be shifting away from TLS 1.2 also and I'd rather be on the front end of that with AMS/AFS..

https://www.openssl.org/source/

[EKjellquist]

So, we're at the point where OpenSSL 1.1.1's EoL date is 9/11/23, OpenSSL 3.0 LTS will be supported until 9/7/26, and OpenSSL 3.1 is their currently-supported release

https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/

Can we expect a new AMS version that will at least support 3.x soon? Clock is ticking on TLS 1.2 support as it is, and OpenSSL 1.0.2 has been out of support for years....

[Code Crafters]

DKIM is the next feature to be added, followed by the OpenSSL update. Both of these are big updates which is why they haven't already been added but they are our highest priority for big new features.

[therentabrain]

If I purchase AMS today, will that TLS upgrade be included when it's ready?

[Code Crafters]

You get 1 year of updates and support. If the update is within the next year it will be included. No definite release date on this feature though yet.

[Code Crafters]

We've updated to OpenSSL 3.1.2 and added support for TLS 1.3 in the latest version 5.1.0.

Please see https://www.codecrafters.com/AbilityMai ... ateHistory for full details of this release.