logoalt Hacker News

OpenSSL 4.1.0

164 points • by petecooper • today at 12:42 PM • 47 comments • view on HN

Comments

haunter • today at 1:10 PM

> Dropped Windows-on-Itanium (VC-WIN64I) and Windows CE (VC-CE) targets from Configurations.

What a throwback. afaik Windows Server 2008 R2 had Itanium updates until 2020 and paid support until this year. Pretty good run to say at least

➕ show 2 replies
hannob • today at 1:12 PM

I don't see "we fixed some of the the excessive performance regressions that we introduced in 3.0". Unfortunate...

Context: https://cryptography.io/en/latest/statements/state-of-openss...

➕ show 3 replies
owenthejumper • today at 3:13 PM

I think it's too little too late, people have started moving on https://www.haproxy.com/blog/state-of-ssl-stacks

➕ show 1 reply
mlhpdx • today at 3:48 PM

> Support for DTLS 1.3 (RFC 9147). Refer to the ossl-guide-dtlsv13(7) manual page for details.

DTLS 1.3 is a huge improvement over 1.2 for efficiency and simplicity. I can’t speak to the OpenSSL implementation but it’s great that support is finally released.

adzm • today at 3:12 PM

I think this is the only software project I use that still requires me to have perl

markasoftware • today at 3:34 PM

Interesting they're adding new support for DTLS 1.3 when afaict most new applications are defaulting to QUIC datagram mode. I have something built around DTLS 1.3 and am using wolfssl for that reason, will have to check this out.

➕ show 1 reply
aftbit • today at 3:20 PM

Wait, OpenSSL didn't support GREASE until now? The RFC standard landed 6 years ago...

I've been linking a lot of stuff against boringssl during that time, I suppose...

ksec • today at 3:14 PM

I wonder what is the current marketshare of Libressl and OpenSSL ?

snvzz • today at 1:20 PM

Mandatory reminder libressl[0] exists.

0. https://www.libressl.org/

➕ show 1 reply
Razengan • today at 1:07 PM

> Dropped Windows-on-Itanium

A sad day. End of an era *salute*

➕ show 1 reply
scsoi • today at 4:38 PM

[flagged]

amelius • today at 1:50 PM

Was it verified by AI?

(Not a strange question given the recent PHP vulns found by AI.)