News: 0001626819

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

OpenSSL 4.0 Released With Encrypted Client Hello, RFC 8998 Support

([Free Software] 3 Hours Ago OpenSSL 4.0)


OpenSSL 4.0 was just released as a big update for this widely-used SSL/TLS and crypto library.

OpenSSL 4.0 delivers better privacy with Encrypted Client Hello (ECH) support to encrypt the initial TLS handshake and hide the Server Name Indication. OpenSSL 4.0 also drops legacy SSLv3 and other old protocol/engine support, improves post-quantum cryptography support with RFC 8998 support, ML-DSA-MU, and tls-hybrid-sm2-mlkem post-quantum group.

OpenSSL 4.0 also makes use of the major version bump to introduce other incompatible changes like removing SSLv2 Client Hello and dropping support for engines as well as removing the Darwin i386 and PowerPC/PPC64 targets.

More details on the OpenSSL 4.0 release via [1]GitHub .



[1] https://github.com/openssl/openssl/releases/tag/openssl-4.0.0



Some people have a way about them that seems to say: "If I have
only one life to live, let me live it as a jerk."