About:
The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) as well as a full-strength general-purpose cryptography library.

Release focus: Major security fixes

Changes:
A fix was introduced for an SSL 2.0 rollback security vulnerability which was reported as CAN-2005-2969. Cipherlists are now sorted in the source instead of at runtime. SSL_METHOD structures are now initialized in the source instead of at runtime. Functions were added for well-known primes. PKCS7_decrypt() is made to work even if no certificate is supplied. Some small subgroup attacks in Diffie-Hellman are avoided.

Author:
The OpenSSL Project Team <openssl __at__ openssl __dot__ org> [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.40/10.00 (34 votes)

Homepage:
http://www.openssl.org/
Tar/GZ:
http://www.openssl.org/source/openssl-0.9.8h.tar.gz
Changelog:
http://www.openssl.org/news/changelog.html
Debian package:
http://packages.debian.org/openssl
Mirror site:
http://www.openssl.org/source/mirror.html

Trove categories: [change]

[Intended Audience]		Developers
[License]		OSI Approved
[Topic]		Software Development :: Libraries

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
Default	0.9.8h	01-Jun-2008	OSI Approved
Beta	0.9.7 Beta 6	21-Dec-2002	OSI Approved
Old Stable	0.9.7m	25-Feb-2007	OSI Approved

 Releases

Version	Focus	Date
0.9.8h	Minor security fixes	01-Jun-2008 18:46
0.9.8g	Minor bugfixes	03-Dec-2007 18:59
0.9.8f	Major security fixes	18-Oct-2007 21:02
0.9.8e	Minor bugfixes	25-Feb-2007 20:50
0.9.8d	Major security fixes	29-Sep-2006 15:31
0.9.8c	Major security fixes	06-Sep-2006 14:40
0.9.8a	Major security fixes	12-Oct-2005 14:20
0.9.8	Major feature enhancements	14-Jul-2005 14:26
0.9.7e	Minor bugfixes	07-Nov-2004 22:14
0.9.7d	Major security fixes	25-Mar-2004 06:47

 Articles referencing this project

Debian: New openssl packages fix predictable random number generator by Patrick Lenz , in Security Sun, May 18th 2008 13:14 Red Hat: Updated OpenSSL packages correct a security issue by Patrick Lenz , in Security Sun, Nov 18th 2007 13:22 Red Hat: Updated OpenSSL packages correct security issues by Patrick Lenz , in Security Sun, Oct 28th 2007 07:38 Red Hat: Updated OpenSSL packages correct several security issues by Patrick Lenz , in Security Sat, Oct 20th 2007 12:57 Debian: New openssl packages fix arbitrary code execution by Patrick Lenz , in Security Tue, Oct 9th 2007 01:26

Red Hat: Updated OpenSSL packages correct several security issues by Patrick Lenz , in Security Sun, Oct 8th 2006 05:58 Debian: New openssl packages fix denial of service by Patrick Lenz , in Security Sun, Oct 8th 2006 05:56 SuSE: New openssl packages fix remote denial of service by Patrick Lenz , in Security Sun, Oct 8th 2006 05:55 SuSE: New openssl, mozilla-nss packages fix RSA signature evasion by Patrick Lenz , in Security Fri, Sep 22nd 2006 09:06 [more articles]

 Comments

[»] OPEN SSL API DOCUMENTATION
by Jerry - Jul 22nd 2002 18:13:40

Could anyone recommend a good place to get documentation on OpenSSL? I've downloaded the software and I need to port it to VxWorks as a client. I would like to find documentation that describes the necessary API calls and the order that they must be called.

THANKS!

[reply] [top]

[»] Not free anymore
by dystopia - Jan 1st 2003 16:50:50

http://www.deadly.org/article.php3?sid=20020924004335

It means that OpenSSL is becoming a non-free software project, because the code from Sun contains licenses which invoke patent litigation; the licence on the new code basically builds a contract that says "if you use this code, you cannot sue Sun".

http://marc.theaimsgroup.com/?l=openbsd-misc&m=103280816316720&w=2

[reply] [top]

---

[»] OpenSSL is wonderful!
by Boogie - Jul 14th 1999 14:39:01

I have been using the combination of Apache, mod_ssl, and OpenSSL for about a year now. Before using OpenSSL, I used SSLeay which was good in its own right but I believe that OpenSSL has a bigger and brighter future than SSLeay. OpenSSL's continued development has been aggressive, releasing bug fixes and feature updates on a regular basis. OpenSSL is easy to setup and use and compiles on a variety of systems. I would highly recommend OpenSSL to anyone wanting well done SSL support!

[reply] [top]

[»] I highly recommend ignoring anything this guy says!
by cypherpunks - Jun 25th 2001 15:37:56

Before using OpenSSL, I used SSLeay which was good in its own right but I believe that OpenSSL has a bigger and brighter future than SSLeay.

Uhhh.... They are the same thing. SSLeay was renamed to OpenSSL, AFAIK. So yeah, considering that SSLeay is dead, I'd say that OpenSSL has a brighter future. Or, considering that they are the same thing, I guess they have the same future.

OpenSSL is easy to setup and use and compiles on a variety of systems. I would highly recommend OpenSSL to anyone wanting well done SSL support!

I would warn you - if you want documentation for your software - look elsewhere. Then come back here because there is nothing else. I would highly recommend OpenSSL to anyone wanting free/opensource SSL support because you have no other real choice!

[reply] [top]

---

[»] Re: OpenSSL
by Michael T. Babcock - Jul 10th 2001 12:21:28


> Uhhh.... They are the same thing.
> SSLeay was renamed to OpenSSL, AFAIK.
To quote OpenSSL's page, "OpenSSL is based on the excellent SSLeay library..."


> I would warn you - if you want
> documentation for your software - look
> elsewhere.
Or you could visit openssl.org/docs and read the library function definitions, then subscribe to the mailing list and read the source to the example programs (like openssl itself). The documentation isn't perfect, but its available.

[reply] [top]

---

[»] Re: OpenSSL
by Richard Levitte - Dec 30th 2002 16:49:27

Yes, OpenSSL is based on SSLeay. SSLeay is dead, and a few people took the last source (0.9.1b) and made it into OpenSSL (0.9.1c). OpenSSL has developped from there.

[reply] [top]

---