{"full_name":"openssl/openssl","owner":"openssl","name":"openssl","url":"https://github.com/openssl/openssl","description":"General purpose TLS and crypto library","homepage":"https://openssl-library.org/","topics":[],"language":"C","license":"Apache-2.0","avatar":"https://avatars.githubusercontent.com/u/3279138?v=4","created_at":"2013-01-15T22:34:48Z","pushed_at":"2026-11-10T07:16:14Z","metrics":{"stars":31400,"forks":11591,"watchers":1016,"issues":11882,"prs":19759,"releases":323,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":1580},"growth":{"day":{"stars":13,"forks":-1,"base_day":"2026-11-09"}},"history":{"dates":["2026-11-09","2026-11-10"],"stars":[31387,31400],"forks":[11592,11591],"watchers":[1016,1016],"issues_open":[null,null],"prs_open":[null,null]},"boards":{},"same_owner":[],"issues":[{"number":17064,"title":"Massive performance degradation in OpenSsl 3.0 if used in a heavy multi threaded server application","comments":133,"created_at":"2021-11-18T15:35:15Z"},{"number":11378,"title":"New EOF detection breaks session resumption","comments":92,"created_at":"2020-03-22T02:33:18Z"},{"number":16812,"title":"Consider adding Meson build system support","comments":71,"created_at":"2021-10-12T18:22:00Z"},{"number":15199,"title":"PEM/DER decoding of PKCS8 RSA private keys are 80 times slower in 3.0","comments":62,"created_at":"2021-05-07T16:41:41Z"},{"number":19220,"title":"ClientHello extensions shuffling to frustrate TLS fingerprinting","comments":46,"created_at":"2022-09-15T07:54:02Z"},{"number":25294,"title":"Race condition on error strings cleanup?","comments":45,"created_at":"2024-08-27T09:48:30Z"},{"number":25155,"title":"QUIC and Thread Fail on NonStop in 3.3 and 3.4","comments":42,"created_at":"2024-08-10T15:21:54Z"},{"number":33060,"title":"make install fails on NonStop for 4.1.0-beta1 (since 4.1.0 initial)","comments":39,"created_at":"2026-09-30T19:45:11Z"}],"discussions":[{"number":33552,"title":"Qustion about Interversion compatability (openSSL 1.1.0 and 4.1.23 in particular)","comments":1,"category":"General Discussion","created_at":"2026-11-05T09:27:50Z"},{"number":33480,"title":"Backport feasibility: method-store cache lock removal for OpenSSL 3.5 LTS","comments":0,"category":"Q&A","created_at":"2026-11-02T07:02:24Z"},{"number":33410,"title":"Windows installer for 4.1 is in production!","comments":0,"category":"Announcements","created_at":"2026-10-27T07:35:07Z"},{"number":33356,"title":"OpenSSL 4.1.0","comments":0,"category":"Announcements","created_at":"2026-10-23T12:23:32Z"},{"number":33291,"title":"Analysis of vulnerabilities for openssl 3.2 EOL version","comments":1,"category":"Q&A","created_at":"2026-10-21T09:17:37Z"},{"number":33290,"title":"What can be done to move a stale pull request forward?","comments":1,"category":"General Discussion","created_at":"2026-10-21T07:37:30Z"},{"number":33284,"title":"Any plans to implement RFC 9973?","comments":1,"category":"General Discussion","created_at":"2026-10-20T13:00:42Z"},{"number":33209,"title":"openssl md5 returning an sha256 digest in FIPS mode","comments":2,"category":"Q&A","created_at":"2026-10-13T18:04:21Z"}],"latest_release":{"name":"OpenSSL 4.1.0","tag":"openssl-4.1.0","published_at":"2026-10-23T12:23:31Z","body":"OpenSSL 4.1.0 is a feature release adding significant new functionality\r\nto OpenSSL.\r\n\r\nThis release incorporates the following potentially significant or incompatible\r\nchanges:\r\n\r\n * Added `VC-WIN32-MSVC2013` and `VC-WIN64A-MSVC2013` build targets to provide\r\n internal functions for bridging the gaps in C99 standard support\r\n that are present in MSVC 2013.\r\n\r\n * Added optimized ML-DSA and ML-KEM NTT operations on `ppc64le`;\r\n optimized ML-DSA operations on `x86_64`;\r\n AVX-512-optimized SHAKE x4 operations for ML-DSA on `x86_64`;\r\n AVX-512 and VAES optimizations for AES-CBC decryption on `x86_64`.\r\n\r\n * Changed `tsget` utility to use `Net::Curl::Easy` (from the `Net-Curl` CPAN\r\n distribution) instead of the abandoned `WWW::Curl::Easy`. Users who rely\r\n on `tsget` should install `Net::Curl::Easy` before upgrading.\r\n\r\n * Dropped Windows-on-Itanium (`VC-WIN64I`) and Windows CE (`VC-CE`) targets\r\n from Configurations.\r\n\r\n * Dropped `no-ecdsa` and `no-ecdh` options from `Configure`, as these options\r\n did not really disable the implementations. Use `no-ec` to disable\r\n the elliptic curve support.\r\n\r\nThis release adds the following new features:\r\n\r\n * Support for DTLS 1.3 ([RFC 9147]).\r\n Refer to the `ossl-guide-dtlsv13(7)` manual page for details.\r\n\r\n * Support for [RFC 8701] GREASE (Generate Random Extensions And Sustain\r\n Extensibility).\r\n\r\n * DTLS support in the SSL listener API.\r\n\r\n * Support for IKEV2 KDF.\r\n\r\n * Initial support for the Elbrus2000 (`e2k`) architecture.\r\n\r\nKnown issues in 4.1.0:\r\n\r\n * \r\n When a DTLS 1.3 KeyUpdate is received, all other outstanding\r\n post-handshake records are dropped from the retransmission buffer.\r\n This means post-handshake records still awaiting an ACK (such as a\r\n NewSessionTicket) will no longer be retransmitted if the original\r\n transmission is lost. A fix is in progress and planned for a future\r\n release.\r\n\r\n * \r\n A permanent receive failure on a DTLS listener can be reported as\r\n `SSL_ERROR_WANT_READ` on an accepted connection. Polling and subsequent\r\n accept calls may also fail to report the error, causing applications\r\n to continue waiting after a permanent failure.\r\n\r\n * \r\n A retryable write failure on a nonblocking connection accepted from a\r\n DTLS listener can be reported as `SSL_ERROR_SYSCALL` instead of\r\n `SSL_ERROR_WANT_WRITE`. Applications treating this result as fatal may\r\n close a connection that is still usable.\r\n\r\n * \r\n DTLS 1.3 servers may abort handshakes with an `unexpected_message` alert\r\n when a client acknowledges part or all of the server's first flight\r\n before sending its response. This can occur after packet loss or while\r\n the client is preparing its authentication response.\r\n\r\n[RFC 9147]: https://datatracker.ietf.org/doc/html/rfc9147\r\n[RFC 8701]: https://datatracker.ietf.org/doc/html/rfc8701"},"readme":true,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}