OpenSSL 1.1.1 Released With TLS 1.3 Support, Better Fends Off Side-Channel Attacks

[phoronix]

Phoronix: OpenSSL 1.1.1 Released With TLS 1.3 Support, Better Fends Off Side-Channel Attacks

The OpenSSL team has announced the OpenSSL 1.1.1 stable release today that's been two years in the making and most notably has TLS 1.3 support...

http://www.phoronix.com/scan.php?page=news_item&px=OpenSSL-1.1.1-Released

[uid313]

So much news and it yet it looks like a minor release.
They should have done a bigger version bump.
Should use semantic versioning.

[El_Presidente]

phoronix do you know if and when it will arrive in distros like ubuntu 18.04 lts?

[Azrael5]

how does it work openssl? does it work over chromium and or firefox?

[cybertraveler]

Does anyone else now get a reactive sinking feeling in their stomach when they see a news post with "OpenSSL" in the title? The associated thought I get is: "oh no; what terrible shit has someone discovered now"

I'm glad to see it's actually positive looking news :P

[pal666]

So much news and it yet it looks like a minor release.
They should have done a bigger version bump.
Should use semantic versioning.

semver is not about news, it is about compatibility

[pal666]

how does it work openssl? does it work over chromium and or firefox?

openssl is a library, chromium and firefox are library users. firefox has its own crypto lib, i have no idea about chromium

[FireBurn]

how does it work openssl? does it work over chromium and or firefox?

FireFox and Chromium both use NSS for TLS 1.3

[FireBurn]

phoronix do you know if and when it will arrive in distros like ubuntu 18.04 lts?

It depends how much of a change it is, the API change radically between 1.0.2 and 1.1.0. If there's been a similar jump again it'll take a while to get everything working and probably won't be put into an LTS

Just read the announcement - drop in replacement

If Ubuntu is already using 1.1.0 then it should be nice n easy

[Flaburgan]

Isn't Ubuntu using libressl?