OpenSSL 4.1.0 is a characteristic publish adding important new functionality
to OpenSSL.
This publish incorporates the following possibly important or incompatible
changes:
-
Added VC-WIN32-MSVC2013 and VC-WIN64A-MSVC2013 build targets to provide
internal functions for bridging the gaps in C99 norm support
that are current in MSVC 2013. -
Added optimized ML-DSA and ML-KEM NTT operations on ppc64le;
optimized ML-DSA operations on x86_64;
AVX-512-optimized SHAKE x4 operations for ML-DSA on x86_64;
AVX-512 and VAES optimizations for AES-CBC decryption on x86_64. -
Changed tsget usefulness to use Net::Curl::Easy (from the Net-Curl CPAN
distribution) alternatively of the abandoned WWW::Curl::Easy. Users who rely
on tsget should instal Net::Curl::Easy before upgrading. -
Dropped Windows-on-Itanium (VC-WIN64I) and Windows CE (VC-CE) targets
from Configurations. -
Dropped no-ecdsa and no-ecdh options from Configure, as these options
did not really disable the implementations. Use no-ec to disable
the elliptic curve support.
This publish adds the following new features:
-
Support for DTLS 1.3 (RFC 9147).
Refer to the ossl-guide-dtlsv13(7) manual leaf for details. -
Support for RFC 8701 GREASE (Generate Random Extensions And Sustain
Extensibility). -
DTLS assistance in the SSL listener API.
-
Support for IKEV2 KDF.
-
Initial assistance for the Elbrus2000 (e2k) architecture.
Known issues in 4.1.0:
-
#32878
When a DTLS 1.3 KeyUpdate is received, all another outstanding
post-handshake records are dropped from the retransmission buffer.
This method post-handshake records motionless awaiting an ACK (such as a
NewSessionTicket) volition no longer be retransmitted if the original
transmission is lost. A fix is ongoing and planned for a future
release. -
#33277
A imperishable obtain nonaccomplishment on a DTLS listener can be reported as
SSL_ERROR_WANT_READ on an accepted connection. Polling and subsequent
accept calls may additionally neglect to study the error, causing applications
to continue waiting following a imperishable failure. -
#33278
A retryable compose nonaccomplishment on a nonblocking association accepted from a
DTLS listener can be reported as SSL_ERROR_SYSCALL alternatively of
SSL_ERROR_WANT_WRITE. Applications treating this outcome as fatal may
close a association that is motionless usable. -
#33242
DTLS 1.3 servers may abort handshakes alongside an unexpected_message alert
when a client acknowledges part or all of the server's archetypal flight
before sending its response. This can happen following packet defeat or while
the client is preparing its authentication response.
