OpenSSL 3.0 in 2020

[EKjellquist]

Folks,

https://www.openssl.org/blog/blog/2019/ ... .0-update/

By this time next year, it sounds like OpenSSL 3.0 will be available, and it probably won't take much time for the larger PCI / NIST scanners to adopt; Going from OpenSSL 1.1.1 to 3.x isn't expected to be as much of a heavy lift as 1.0.2 to 1.1.1, just wanted to toss this out there as far as the future of AMS...

[Code Crafters]

We always aim to keep up with the latest OpenSSL versions. As you said the leap from 1.0.x to 1.1.x is a huge one requiring large code refactoring which is why we haven't yet done it. However, we definitely want to implment TLS 1.3 and all future SSL options that we can and will continue to move forward with this.

[EKjellquist]

Recently-updated OpenSSL 1.0.2u release notes, apparently this will be the final update before it goes out of support on 12/31/19..

https://www.openssl.org/news/secadv/20191206.txt

[Code Crafters]

Thanks for the information. Hopefully we can implement a later version of OpenSSL next year to gain access to TLS 1.3 and the latest ciphers.

[EKjellquist]

<Bump>

We're currently running Apache 2.4.54 / PHP 8.1 and they'll continue to coexist with OpenSSL 1.0.2 ok, but pretty soon (Apache 2.4.55 / PHP 8.2) will fully support OpenSSL 3.0.x and are expected by the end of the year, so I'm wondering if AMS adding support for OpenSSL 3 is progressing? Alternatively, could we see support for OpenSSL 1.1.1 in the near future?

[Code Crafters]

We know that SSL and DKIM are both upgrades that are highly requested and needed and will add them as soon as we can but have no expected release dates for these yet.

[Code Crafters]

We've updated to OpenSSL 3.1.2 and added support for TLS 1.3 in the latest version 5.1.0.

Please see https://www.codecrafters.com/AbilityMai ... ateHistory for full details of this release.

[EKjellquist]

We've updated to OpenSSL 3.1.2 and added support for TLS 1.3 in the latest version 5.1.0.

Just bought the update, seems good, CheckTLS / SSLLabs both report current TLS