OpenSSL 1.0.0 released

OpenSSL

unread,

Mar 29, 2010, 10:52:21 AM3/29/10

to

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OpenSSL version 1.0.0 released
==============================

OpenSSL - The Open Source toolkit for SSL/TLS
http://www.openssl.org/

The OpenSSL project team is pleased to announce the release of
version 1.0.0 of our open source toolkit for SSL/TLS. This new
OpenSSL version is a major release and incorporates many new
features as well as major fixes compared to 0.9.8n. For a complete
list of changes, please see http://www.openssl.org/source/exp/CHANGES .

The most significant changes are:

o RFC3280 path validation: sufficient to process PKITS tests.
o Integrated support for PVK files and keyblobs.
o Change default private key format to PKCS#8.
o CMS support: able to process all examples in RFC4134
o Streaming ASN1 encode support for PKCS#7 and CMS.
o Multiple signer and signer add support for PKCS#7 and CMS.
o ASN1 printing support.
o Whirlpool hash algorithm added.
o RFC3161 time stamp support.
o New generalised public key API supporting ENGINE based algorithms.
o New generalised public key API utilities.
o New ENGINE supporting GOST algorithms.
o SSL/TLS GOST ciphersuite support.
o PKCS#7 and CMS GOST support.
o RFC4279 PSK ciphersuite support.
o Supported points format extension for ECC ciphersuites.
o ecdsa-with-SHA224/256/384/512 signature types.
o dsa-with-SHA224 and dsa-with-SHA256 signature types.
o Opaque PRF Input TLS extension support.
o Updated time routines to avoid OS limitations.

We consider OpenSSL 1.0.0 to be the best version of OpenSSL available
and we strongly recommend that users of older versions upgrade as
soon as possible. OpenSSL 1.0.0 is available for download via HTTP
and FTP from the following master locations (you can find the various
FTP mirrors under http://www.openssl.org/source/mirror.html):

* http://www.openssl.org/source/
* ftp://ftp.openssl.org/source/

The distribution file name is:

o openssl-1.0.0.tar.gz
Size: 4010166
MD5 checksum: 89eaa86e25b2845f920ec00ae4c864ed
SHA1 checksum: 3f800ea9fa3da1c0f576d689be7dca3d55a4cb62

The checksums were calculated using the following commands:

openssl md5 openssl-1.0.0.tar.gz
openssl sha1 openssl-1.0.0.tar.gz

Yours,

The OpenSSL Project Team...

Mark J. Cox Nils Larsch Ulf Möller
Ralf S. Engelschall Ben Laurie Andy Polyakov
Dr. Stephen Henson Richard Levitte Geoff Thorpe
Lutz Jänicke Bodo Möller

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iQEVAwUBS7C22aLSm3vylcdZAQI6TggAxWKuZFWcdtoBIfJpvHbdVlVJUe2O4tO7
+wHqMRANGZLx+io2KXxe1s3/qaKTOtlhP44jTDSRFxn418RLlZ4VS/I/mlKbEd7s
tFgT34z8u8Et6oj5OwN8XbzwvkEGv+Ytf15Oub9DLa6doQ0xehaIKn+BHuDUeZup
IVQkkAplKOMV77rfCZQWcApWVOPs6d0tP7F4uWHUNElzVFF6U2G38qKymJEIotUk
a9kH7uS1EXFz0j4Fm7oVbE8tvrDQJa71Odtvt3N++Qppd+e5OgnU9klh7fnZ78Ae
APfz3vPBLhItyGnpeBNwppFcKiPtG9M6Bthw+AsGVnsDiieHdHmGTg==
=Wfex
-----END PGP SIGNATURE-----
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openss...@openssl.org
Automated List Manager majo...@openssl.org

Thomas J. Hruska

unread,

Mar 29, 2010, 12:04:49 PM3/29/10

to

OpenSSL wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> OpenSSL version 1.0.0 released
> ==============================

Congratulations! It has been many years in the making, but this is a
HUGE milestone for OpenSSL and everyone has worked hard to get this
product to its current state. The developers deserve a round of applause!

To all the developers: Take a break and celebrate!

--
Thomas Hruska
Shining Light Productions

Home of BMP2AVI, Nuclear Vision, ProtoNova, and Win32 OpenSSL.
http://www.slproweb.com/

Kenneth Goldman

unread,

Mar 30, 2010, 12:25:02 PM3/30/10

to

Is there any significance to the 1.0.0.value other than "it's the next number after 0.9.9"?

(Hoping that someone will answer that openssl will guarantee backward compatibility
from here on.)

--
Ken Goldman kg...@watson.ibm.com
914-784-7646 (863-7646)

Victor Duchovni

unread,

Mar 30, 2010, 1:24:07 PM3/30/10

to

On Tue, Mar 30, 2010 at 12:25:02PM -0400, Kenneth Goldman wrote:

> Is there any significance to the 1.0.0.value other than "it's the next
> number after 0.9.9"?
>
> (Hoping that someone will answer that openssl will guarantee backward
> compatibility
> from here on.)

From the list archives, in response to your message asking the same
question on Apr 02 2009:

http://www.mail-archive.com/openss...@openssl.org/msg56601.html

--
Viktor.