OpenSSL 4.1.0: What’s new, what’s removed, and what’s still broken
MentionsOpenSSL
The OpenSSL project released version 4.1.0, adding support for DTLS 1.3 and listing four known bugs in the DTLS code that ships with it. DTLS is the variant of TLS built for datagram transports such as UDP, and version 1.3 is defined in RFC 9147. The bugs fall on developers who adopt DTLS 1.3 or the DTLS support newly added to OpenSSL’s SSL listener API.
Summary from Help Net Security.
Explained
The technology and terms in this story. Learn more
- TechnologyOpenSSLThe open-source library that much of the internet uses to speak TLS and do cryptography.
- ProtocolDTLS · Datagram Transport Layer SecurityTLS adapted for UDP: the same encryption for traffic that can arrive out of order or not at all.
- ProtocolTLS · Transport Layer SecurityThe encryption protocol behind HTTPS: it keeps traffic between two programs private and proves who the server is.
- ProtocolSSL · Secure Sockets LayerThe retired predecessor of TLS; the name lives on in product names such as OpenSSL and "SSL VPN".