OpenSSL OpenSSL 1.1.1 pre release 3 (beta) released

eva2000 · Mar 21, 2018

First OpenSSL 1.1.1 beta (pre release 3) has been released https://mta.openssl.org/pipermail/openssl-announce/2018-March.txt

OpenSSL version 1.1.1 pre release 3 (beta)
===========================================

OpenSSL - The Open Source toolkit for SSL/TLS
/index.html

OpenSSL 1.1.1 is currently in beta. OpenSSL 1.1.1 pre release 3 has now
been made available. For details of changes and known issues see the
release notes at:

/news/openssl-1.1.1-notes.html

Note: This OpenSSL pre-release has been provided for testing ONLY.
It should NOT be used for security critical purposes.

The beta release is available for download via HTTP and FTP from the
following master locations (you can find the various FTP mirrors under
/source/mirror.html):

* /source/index.html
* ftp://ftp.openssl.org/source/

The distribution file name is:

o openssl-1.1.1-pre3.tar.gz
Size: 6552052
SHA1 checksum: a9dee6b70334726420f483c496216d2b335a4510
SHA256 checksum: b541d574d8d099b0bc74ebc8174cec1dc9f426d8901d04be7874046ad72116b0

The checksums were calculated using the following commands:

openssl sha1 openssl-1.1.1-pre3.tar.gz
openssl sha256 openssl-1.1.1-pre3.tar.gz

Please download and check this beta release as soon as possible.
To report a bug, open an issue on GitHub:

openssl/openssl

Please check the release notes and mailing lists to avoid duplicate
reports of known issues. (Of course, the source is also available
on GitHub.)

Yours,

The OpenSSL Project Team.
Click to expand...

eva2000 · Mar 21, 2018

test install looks ok with Nginx 1.13.10 + OpenSSL 1.1.1 pre release 3 beta with TLS v1.3 support

with GCC 7.2.1 compiler

nginx -V
nginx version: nginx/1.13.10
built by gcc 7.2.1 20170829 (Red Hat 7.2.1-1) (GCC)
built with OpenSSL 1.1.1-pre3 (beta) 20 Mar 2018
TLS SNI support enabled
configure arguments: --with-ld-opt='-L/usr/local/lib -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -fstack-protector-strong -flto -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations -gsplit-dwarf' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --add-dynamic-module=../incubator-pagespeed-ngx-1.13.35.2-stable --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.4.2 --add-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.31 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.14 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.31 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre=../pcre-8.41 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.1.1-pre3 --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3'
Click to expand...

another server with GCC 8.0.1 compiler

nginx -V
nginx version: nginx/1.13.10
built by gcc 8.0.1 20180318 (experimental) (GCC)
built with OpenSSL 1.1.1-pre3 (beta) 20 Mar 2018
TLS SNI support enabled
configure arguments: --with-ld-opt='-L/usr/local/lib -ljemalloc -Wl,-z,relro -Wl,-rpath,/usr/local/lib' --with-cc-opt='-I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -Wno-error=strict-aliasing -fstack-protector-strong -flto -fuse-ld=gold --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wno-cast-function-type -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-compat --with-http_stub_status_module --with-http_secure_link_module --add-dynamic-module=../nginx-module-vts --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream=dynamic --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.4.2 --add-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.31 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.14 --add-module=../ngx_http_redis-0.3.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.31 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre=../pcre-8.41 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.1.1-pre3 --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3'
Click to expand...

buik · Mar 22, 2018

To all. Please note that testing your website on TLS 1.3 with OpenSSL 1.1.1 pre release 3 beta is useless due to the fact that OpenSSL 1.1.1...... is running TLS 1.3 draft 26.

Browser support is up to TLS 1.3 draft 23-24, speaking off Chrome 65 production.
If there is a need to test anyway, use OpenSSL_1_1_1-pre2.

eva2000 · Mar 22, 2018

Yeah the draft mis-alignment as TLS v1.3 drafts are made is tricky. I believe TLS v1.3 draft 28 is now the latest too.

buik · Mar 22, 2018

eva2000 said: ↑

I believe TLS v1.3 draft 28 is now the latest too.
Click to expand...

Haha draft 28 already. it is really a mess and a go at the TLS standards team.
Check the TLS 1.3. mailing lists. It is a joke.

buik · Mar 22, 2018

Please note that draft 23 originally was the proposed standard. Since the last call for draft 23 as standard (it only saved a few days or it had become the standard). A lot changed in the documents to clarify things they could have dealt with for 100 years. Apparently a few nerds have now woken up.

History for draft-ietf-tls-tls13-28

eva2000 · Mar 22, 2018

Well reality is with any tech/code, nothing is ever statically deemed stable as it's always under development and ever evolving

buik · Mar 22, 2018

eva2000 said: ↑

Well reality is with any tech/code, nothing is ever statically deemed stable as it's always under development and ever evolving
Click to expand...

Once again it shows the limitation of too clever techies.
Side A: To smart. Side B: Communication and project management zero.

eva2000 · Mar 23, 2018

dev version of SSL Labs test has updated to TLSv1.3 draft 23 so OpenSSL 1.1.1-pre2 is at least supported SSL Server Test: http2.centminmod.com (Powered by Qualys SSL Labs)

Log in / Register

Forums

Join the community today

OpenSSL OpenSSL 1.1.1 pre release 3 (beta) released

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

buik “The best traveler is one without a camera.”

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Join the community today

OpenSSL OpenSSL 1.1.1 pre release 3 (beta) released

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

buik “The best traveler is one without a camera.”

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

buik “The best traveler is one without a camera.”

eva2000 Administrator Staff Member

.