OpenSSL 4.0 Final Release - Live
OpenSSL Announce <[email protected]> Tue, 14 Apr 2026 20:28:24 +0000
| Newsgroups | gmane.comp.encryption.openssl.announce |
|---|---|
| Message-ID | <[email protected]> |
----_NmP-7101de82d1f3f81e-Part_1
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
OpenSSL 4.0 Final Release - Live=20
https://api.ourmailsender4.=
com/open/image.png?key=3D66eed5f3cb47555fe0576c05590dea39ff122ca4661e2d6338=
ee63f9601d47b470f89254e7bb03853840f14224c2dff6_c23d85639e931eb2d14b26d34ea9=
4514
https://cdn1.ourmailsender4.com/userContent/38291/fileManager/42391/Op=
enSSL_DarkRed_Library.png
OpenSSL 4.0 Final Release Live
------------------------------
The final release of OpenSSL 4.0 is now =
live. We would like to thank all those who contributed to the OpenSSL 4.0 =
release, without whom the OpenSSL Library would not be possible.
This release incorporates the following potentially significant or =
incompatible changes:
---Removed extra leading =E2=80=9800:=E2=80=99 when =
printing key data such as an RSA modulus in hexadecimal format where the =
first (most significant)=20
byte is >=3D 0x80.
---Standardized the width=
of hexadecimal dumps to 24 bytes for signatures (to stay within the 80 =
characters limit) and 16 bytes for everything else.
---Lower bounds checks are now enforced when using PKCS5_PBKDF2_HMAC API =
with FIPS provider.
---Added AKID verification checks when =
X509_V_FLAG_X509_STRICT is set.
---Augmented CRL verification process with =
several additional checks.
---libcrypto no longer cleans up globally =
allocated data via atexit().
---BIO_snprintf() now uses snprintf() provided=
by libc instead of internal implementation.
---OPENSSL_cleanup() now runs =
in a global destructor, or not at all by default.
---ASN1_STRING has been =
made opaque.
---Signatures of numerous API functions, including those that =
are related to X509 processing, are changed to include const qualifiers for=
argument and return types, where suitable.
---Deprecated X509_cmp_time(), =
X509_cmp_current_time(), and X509_cmp_timeframe() in favor of =
X509_check_certificate_times().
---Removed support for the SSLv2 Client =
Hello.
---Removed support for SSLv3. SSLv3 has been deprecated since 2015, =
and OpenSSL had it disabled by default since version 1.1.0 ( 2016).
---Removed support for engines. The no-engine build option and the =
OPENSSL_NO_ENGINE macro are always present.
---Support of deprecated =
elliptic curves in TLS according to RFC 8422: https://api.ourmailsender4.=
com/c/ed1ca246047b5044e5f58446ce1dbe43_88f6ca38dae2ae5d0e5b7c41b1d8aaa2?=
sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=
=3DXp2h
was disabled at compile-time by default. To enable it, use the =
enable-tls-deprecated-ec configuration option.
---Support of explicit EC =
curves was disabled at compile-time by default. To enable it, use the =
enable-ec_explicit_curves configuration option.
---Removed c_rehash script =
tool. Use openssl rehash instead.
---Removed the deprecated msie-hack =
option from the openssl ca command.
---Removed BIO_f_reliable() =
implementation without replacement. It was broken since 3.0 release without=
any complaints.
---Removed deprecated support for custom EVP_CIPHER, =
EVP_MD, EVP_PKEY, and EVP_PKEY_ASN1 methods.
---Removed deprecated fixed =
SSL/TLS version method functions.
---Removed deprecated functions =
ERR_get_state(), ERR_remove_state() and ERR_remove_thread_state(). The =
ERR_STATE object is now always opaque.
---Dropped darwin-i386{,-cc} and =
darwin-ppc{,64}{,-cc} targets from Configurations.
This release adds the =
following new features:
---Support for Encrypted Client Hello (ECH, RFC =
9849: https://api.ourmailsender4.com/c/c43df77fb17176a01d174c88f18fe209_0c0=
fd45472dc400384cb719bc73f81fd?sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d5=
69da0a16bbee4bf9e1a305981c&aid=3DXp2h
). See doc/designs/ech-api.md for =
details.
---Support for RFC 8998: https://api.ourmailsender4.=
com/c/97a76875fcc3bcf5ad95a84834fa0c6b_09ffe5037e94af86ccd6ca2e2728d06f?=
sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=
=3DXp2h
, signature algorithm sm2sig_sm3, key exchange group curveSM2, and =
[tls-hybrid-sm2-mlkem] post-quantum group curveSM2MLKEM768.
---cSHAKE function support as per SP 800-185: https://api.ourmailsender4.=
com/c/3be5d6e8b3ab8dc490cb862f9e58a484_730a767130ccb57ea744f29c61799d5d?=
sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=
=3DXp2h
.
---=E2=80=9CML-DSA-MU=E2=80=9D digest algorithm support.
---Support for SNMP KDF and SRTP KDF.
---FIPS self tests can now be =
deferred and run as needed when installing the FIPS module with the =
-defer_tests option of the openssl fipsinstall command.
---Support for using either static or dynamic VC runtime linkage on Windows=
.
---Support for negotiated FFDHE key exchange in TLS 1.2 in accordance =
with RFC 7919: https://api.ourmailsender4.com/c/aef4d6b2ede98cf9cc6eac5c9ed=
3151c_567773d5ee4a60cbf8073bd9d7a4ea78?sid=3Ddae27000e2c035ddc147fdc8bf3020=
d7_0335d569da0a16bbee4bf9e1a305981c&aid=3DXp2h
.
Please see the CHANGES.md:=
https://github.com/openssl/openssl/blob/openssl-3.6/CHANGES.md#openssl-36
file in the release for a full list of changes since OpenSSL 3.6, and =
incompatible or potentially significant changes.
You can download the =
release from our download page: https://www.openssl-library.org/source/
or from the GitHub release page: https://github.com/openssl/openssl/release=
s/tag/openssl-3.6.0
.
OpenSSL 40 is not a long-term stable (LTS) release. =
Per OpenSSL=E2=80=99s LTS policy: https://api.ourmailsender4.=
com/c/b881f0e6ae1704077aa3da789378ccb3_e61475d923fea6e5a16540bacee1e32a?=
sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=
=3DXp2h
, 4.0 will be supported until May 14, 2027.
The next release will be OpenSSL 4.1 in October 2026. Follow us on GitHub, =
OpenSSL Communities: https://api.ourmailsender4.com/c/9e3706a4a6a61466d5efd=
b7b0c42271e_941e27a5b563b812a879b830f4fc7c72?sid=3Ddae27000e2c035ddc147fdc8=
bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=3DXp2h
and our Blog: https://api.ourmailsender4.com/c/550a8070397e428a25b1f275de0d=
8626_51e464af4eb3285df0bd882d1723d6f0?sid=3Ddae27000e2c035ddc147fdc8bf3020d=
7_0335d569da0a16bbee4bf9e1a305981c&aid=3DXp2h
.
OpenSSL Corporation: =
https://openssl-corporation.org
, Inc. 40 East Main Street, Newark,=20
New Castle County, 19711, USA
Unsubscribe: https://api.ourmailsender4.=
com/api/unsubscribe?key=3D66eed5f3cb47555fe0576c05590dea39ff122ca4661e2d633=
8ee63f9601d47b470f89254e7bb03853840f14224c2dff6_c23d85639e931eb2d14b26d34ea=
94514
| Update Profile: https://api.ourmailsender4.com/api/update?=
key=3D66eed5f3cb47555fe0576c05590dea39ff122ca4661e2d6338ee63f9601d47b470f89=
254e7bb03853840f14224c2dff6_c23d85639e931eb2d14b26d34ea94514
| Report Junk: https://api.ourmailsender4.com/api/junk?=
key=3D66eed5f3cb47555fe0576c05590dea39ff122ca4661e2d6338ee63f9601d47b470f89=
254e7bb03853840f14224c2dff6_c23d85639e931eb2d14b26d34ea94514
View this email in your browser: https://api.ourmailsender4.=
com/templatePreview?key=3D66eed5f3cb47555fe0576c05590dea39ff122ca4661e2d633=
8ee63f9601d47b470f89254e7bb03853840f14224c2dff6_c23d85639e931eb2d14b26d34ea=
94514&html=3Dtrue
----_NmP-7101de82d1f3f81e-Part_1
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd"><html ><head><style type=3D"text/css">=20
@font-face {
font-family: =
Inter;
src: url(https://cdn1.ourmailsender4.=
com/fonts/inter/Inter-Regular.ttf);
}
</style>
<style =
type=3D"text/css">=20
@font-face {
font-family: Play;
src: =
url(https://cdn1.ourmailsender4.com/fonts/play/Play-Regular.ttf);
}
</style>
<style>a {color:#000000; text-decoration:underline; }
p {margin:10px 0; padding:0; }
td {border-collapse:collapse; }
body {color:#000000; width:100%; height:100%; margin:0; padding:0; =
font-size:14px; font-style:normal; text-align:left; font-family:arial; =
font-weight:normal; letter-spacing:normal; background-color:#FFFFFF; }
table {border-collapse:collapse; mso-table-lspace:0pt; =
mso-table-rspace:0pt; }
h1, .mph1 {color:#000000; font-size:40px; =
font-style:normal; text-align:left; font-family:arial; font-weight:bold; =
line-height:normal; letter-spacing:normal; }
h2, .mph2 {color:#000000; =
font-size:30px; font-style:normal; text-align:left; font-family:arial; =
font-weight:bold; line-height:normal; letter-spacing:normal; }
h3, .mph3 {color:#000000; font-size:20px; font-style:normal; =
text-align:left; font-family:arial; font-weight:normal; line-height:normal;=
letter-spacing:normal; }
h4, .mph4 {color:#000000; font-size:14px; =
font-style:italic; text-align:left; font-family:arial; font-weight:bold; =
line-height:100%; letter-spacing:normal; }
.mpmFButt1 {font:arial; =
color:#FFFFFF; font-size:14px; border-radius:3px; background-color:#000000;=
}
img, a img {border:none; outline:none; text-decoration:none; =
-ms-text-size-adjust:100%; mso-line-height-rule:exactly; =
-ms-interpolation-mode:bicubic; -webkit-text-size-adjust:100%; }
.hideInEmail {display:none; mso-hide:all; }
p, a, li, td, blockquote =
{mso-line-height-rule:exactly; }
a[href^=3Dtel], [href^=3Dsms] =
{color:inherit; cursor:default; text-decoration:none; }
a[x-apple-data-detectors] {color:inherit!important; font-size:inherit !=
important; font-family:inherit !important; font-weight:inherit !important; =
line-height:inherit !important; text-decoration:none !important; }
@media screen and (max-width: 640px) {.mobile-hide {display: none !=
important; hide-mso: all !important; }
.desktop-hide {display: revert !=
important; mso-hide: all !important; }
.responsiveTd {width: 100% !=
important; border: none !important; display: block !important; padding: 0px=
!important; max-width: 100% !important; min-width: 100% !important; =
padding-left: 0px !important; padding-right: 0px !important; }
.responsiveTbl {width: 100% !important; border: none !important; min-width:=
100% !important; }
.mobiledesktop-hide {display: none !important; =
mso-hide: all; }
}
@media screen and (min-width: 641px) {.mobile-hide =
{display: revert !important; mso-hide: none !important; }
.desktop-hide {height: auto !important; display: none !important; overflow:=
visible !important; }
.mobiledesktop-hide {display: none !important; =
mso-hide: all; }
}
p, a, li, td, body, table, blockquote =
{-ms-text-size-adjust:100%; -webkit-text-size-adjust:100%; }
h1, h2, h3, h4, h5, h6, .mph1, .mph2, .mph3, .mph4 {margin:0; =
display:block; padding:0; }
</style><title></title><meta name=3D"viewport" =
content=3D"width=3Ddevice-width, initial-scale=3D1, =
maximum-scale=3D1"/></head><body><div style=3D"display:none; =
max-height:0px; overflow:hidden; font-size:0px; line-height:0px; =
color:transparent; opacity:0; visibility:hidden; mso-hide:all;">
OpenSSL 4.0 Final Release - Live
<div id=3D"preheaderpad" =
style=3D"display:none; max-height:0px; overflow:hidden; font-size:0px; =
line-height:0px; color:tran#sparent; opacity:0; visibility:hidden; =
mso-hide:all;"> =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C =E2=80=8C=
=E2=80=8C</div>
</div>
<div style=3D"height: 0;"><img=
src=3D"https://api.ourmailsender4.com/open/image.png?=
key=3D66eed5f3cb47555fe0576c05590dea39ff122ca4661e2d6338ee63f9601d47b470f89=
254e7bb03853840f14224c2dff6_c23d85639e931eb2d14b26d34ea94514" =
href=3D"https://api.ourmailsender4.com/openclick" title=3D"" alt=3D"" =
/></div><table width=3D"100%" cellspacing=3D"0" cellpadding=3D"0" =
class=3D"templateBody" style=3D"width: 100%; height: 100%; margin: 0; =
padding-top: 20px; padding-left: 0px; padding-right: 0px; padding-bottom: =
20px; -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%; " =
bgColor=3D"#FFFFFF"><tr><td valign=3D"top"><table align=3D"center" =
style=3D"width: 100%; margin: 0; max-width: 100%; " width=3D"100%" =
cellPadding=3D"0" cellSpacing=3D"0"><tr><td style=3D"padding-top: 20px; =
padding-left: 0px; padding-right: 0px; padding-bottom: 20px; =
background-color: #FFFFFF; -ms-text-size-adjust: 100%; =
-webkit-text-size-adjust: 100%; " valign=3D"top"><table align=3D"center" =
class=3D"" style=3D"margin: 0 auto; max-width: 100%; min-width: 100%; " =
width=3D"100%" cellPadding=3D"0" cellSpacing=3D"0"><tr><td align=3D"center"=
style=3D"padding-top: 0px; padding-left: 0px; padding-right: 0px; =
padding-bottom: 0px; background-size: cover; background-color: #f4f4f4; =
background-image: url(); background-repeat: repeat; background-position: =
center; " width=3D"100%" valign=3D"top"><table align=3D"center" =
class=3D"responsiveTbl" width=3D"555" cellPadding=3D"0" =
cellSpacing=3D"0"><tr><td class=3D"responsiveTd" style=3D"max-width: 100%; =
padding-top: 15px; border-style: none; border-width: 1px; padding-left: =
15px; padding-right: 15px; padding-bottom: 0px; background-size: cover; =
background-color: #ffffff; background-image: url(); background-repeat: =
repeat; background-position: center; " width=3D"100%" valign=3D"top"><table=
align=3D"center" class=3D"" style=3D"max-width: 100%; min-width: 100%; " =
width=3D"100%" cellPadding=3D"0" cellSpacing=3D"0"><tr><td =
style=3D"padding-top: 0px; padding-left: 0px; padding-right: 0px; =
padding-bottom: 20px; " width=3D"100%" valign=3D"undefined"><table =
align=3D"left" style=3D"border-collapse: collapse; mso-table-lspace: 0pt; =
mso-table-rspace: 0pt; -ms-text-size-adjust: 100%; -webkit-text-size-adjust=
: 100%; " width=3D"40%" cellPadding=3D"0" cellSpacing=3D"0"><tr><td =
style=3D"-ms-text-size-adjust: 100%; mso-line-height-rule: exactly; =
-webkit-text-size-adjust: 100%; "><img alt=3D"" src=3D"https://cdn1.=
ourmailsender4.com/userContent/38291/fileManager/42391/OpenSSL_DarkRed_Libr=
ary.png" style=3D"border: 0; height: auto !important; margin: 0; display: =
block !important; outline: none; padding: 0; border-radius: 0; =
padding-bottom: 0; vertical-align: bottom; text-decoration: none; =
-ms-interpolation-mode: bicubic; max-width: 100%; min-width: 100%; " =
title=3D"" width=3D"210" data-custom=3D""/></td></tr></table></td></tr></ta=
ble><table align=3D"center" class=3D"" style=3D"max-width: 100%; min-width:=
100%; " width=3D"100%" cellPadding=3D"0" cellSpacing=3D"0"><tr><td =
style=3D"padding-top: 0; padding-left: 0; padding-right: 0; padding-bottom:=
0; " width=3D"100%"><table align=3D"center" style=3D"max-width: 100%; " =
width=3D"100%" cellPadding=3D"0" cellSpacing=3D"0"><tr><td =
style=3D"padding-top: 20px; border-width: 0; padding-left: 0px; =
padding-right: 0px; padding-bottom: 10px; background-color: transparent; " =
width=3D"100%"><div style=3D"color: #000000; position: relative; font-size:=
14px; textAlign: left; word-break: break-word; font-family: arial; =
font-weight: normal; mso-line-height-rule: exactly; line-height: =
normal;letter-spacing: normal; "><h2><strong>OpenSSL 4.0 Final Release =
Live</strong></h2>
<p>The final release of OpenSSL 4.0 is now live. We=
would like to thank all those who contributed to the OpenSSL 4.0 release,=
without whom the OpenSSL Library would not be possible.</p>
<p>This release incorporates the following potentially significant or =
incompatible changes:</p>
<ul><li>Removed extra leading =
=E2=80=9800:=E2=80=99 when printing key data such as an RSA modulus in =
hexadecimal format where the first (most significant) <br>byte is >=3D =
0x80.</li><li>Standardized the width of hexadecimal dumps to 24 bytes for =
signatures (to stay within the 80 characters limit) and 16 bytes for =
everything else.</li><li>Lower bounds checks are now enforced when using =
<code>PKCS5_PBKDF2_HMAC</code> API with FIPS provider.</li><li>Added AKID =
verification checks when <code>X509_V_FLAG_X509_STRICT</code> is set.=
</li><li>Augmented CRL verification process with several additional checks.=
</li><li><code>libcrypto</code> no longer cleans up globally allocated data=
via <code>atexit()</code>.</li><li><code>BIO_snprintf()</code> now uses =
<code>snprintf()</code> provided by libc instead of internal implementation=
.</li><li><code>OPENSSL_cleanup()</code> now runs in a global destructor, =
or not at all by default.</li><li><code>ASN1_STRING</code> has been made =
opaque.</li><li>Signatures of numerous API functions, including those that =
are related to X509 processing, are changed to include <code>const</code> =
qualifiers for argument and return types, where suitable.=
</li><li>Deprecated <code>X509_cmp_time()</code>, <code>X509_cmp_current_ti=
me()</code>, and <code>X509_cmp_timeframe()</code> in favor of =
<code>X509_check_certificate_times()</code>.</li><li>Removed support for =
the SSLv2 Client Hello.</li><li>Removed support for SSLv3. SSLv3 has been =
deprecated since 2015, and OpenSSL had it disabled by default since version=
1.1.0 ( 2016).</li><li>Removed support for engines. The =
<code>no-engine</code> build option and the <code>OPENSSL_NO_ENGINE</code> =
macro are always present.</li><li>Support of deprecated elliptic curves in =
TLS according to <a href=3D"https://api.ourmailsender4.=
com/c/ed1ca246047b5044e5f58446ce1dbe43_88f6ca38dae2ae5d0e5b7c41b1d8aaa2?=
sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=
=3DXp2h" style=3D"color: #000000;">RFC 8422</a> was disabled at =
compile-time by default. To enable it, use the <code>enable-tls-deprecated-=
ec</code> configuration option.</li><li>Support of explicit EC curves was =
disabled at compile-time by default. To enable it, use the =
<code>enable-ec_explicit_curves</code> configuration option.=
</li><li>Removed <code>c_rehash</code> script tool. Use <code>openssl =
rehash</code> instead.</li><li>Removed the deprecated =
<code>msie-hack</code> option from the <code>openssl ca</code> command.=
</li><li>Removed <code>BIO_f_reliable()</code> implementation without =
replacement. It was broken since 3.0 release without any complaints.=
</li><li>Removed deprecated support for custom <code>EVP_CIPHER</code>, =
<code>EVP_MD</code>, <code>EVP_PKEY</code>, and <code>EVP_PKEY_ASN1</code> =
methods.</li><li>Removed deprecated fixed SSL/TLS version method functions.=
</li><li>Removed deprecated functions <code>ERR_get_state()</code>, =
<code>ERR_remove_state()</code> and <code>ERR_remove_thread_state()</code>.=
The <code>ERR_STATE</code> object is now always opaque.</li><li>Dropped =
<code>darwin-i386{,-cc}</code> and <code>darwin-ppc{,64}{,-cc}</code> =
targets from Configurations.</li></ul>
<p>This release adds the following =
new features:</p>
<ul><li>Support for Encrypted Client Hello (ECH, <a =
href=3D"https://api.ourmailsender4.com/c/c43df77fb17176a01d174c88f18fe209_0=
c0fd45472dc400384cb719bc73f81fd?sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335=
d569da0a16bbee4bf9e1a305981c&aid=3DXp2h" style=3D"color: #000000;">RFC =
9849</a>). See <code>doc/designs/ech-api.md</code> for details.=
</li><li>Support for <a href=3D"https://api.ourmailsender4.=
com/c/97a76875fcc3bcf5ad95a84834fa0c6b_09ffe5037e94af86ccd6ca2e2728d06f?=
sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=
=3DXp2h" style=3D"color: #000000;">RFC 8998</a>, signature algorithm =
<code>sm2sig_sm3</code>, key exchange group <code>curveSM2</code>, and =
[tls-hybrid-sm2-mlkem] post-quantum group <code>curveSM2MLKEM768</code>.=
</li><li>cSHAKE function support as per <a href=3D"https://api.=
ourmailsender4.com/c/3be5d6e8b3ab8dc490cb862f9e58a484_730a767130ccb57ea744f=
29c61799d5d?sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1=
a305981c&aid=3DXp2h" style=3D"color: #000000;">SP 800-185</a>.=
</li><li>=E2=80=9CML-DSA-MU=E2=80=9D digest algorithm support.=
</li><li>Support for SNMP KDF and SRTP KDF.</li><li>FIPS self tests can now=
be deferred and run as needed when installing the FIPS module with the =
<code>-defer_tests</code> option of the <code>openssl fipsinstall</code> =
command.</li><li>Support for using either static or dynamic VC runtime =
linkage on Windows.</li><li>Support for negotiated FFDHE key exchange in =
TLS 1.2 in accordance with <a href=3D"https://api.ourmailsender4.=
com/c/aef4d6b2ede98cf9cc6eac5c9ed3151c_567773d5ee4a60cbf8073bd9d7a4ea78?=
sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=
=3DXp2h" style=3D"color: #000000;">RFC 7919</a>.</li></ul>
<p>Please see the <a href=3D"https://api.ourmailsender4.=
com/c/22954391dea515110c4eac1af3b375e7_40df9593fbad77aad9f2a3e5701901c0?=
sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=
=3DXp2h" data-mce-href=3D"https://github.com/openssl/openssl/blob/openssl-3=
.6/CHANGES.md#openssl-36" target=3D"_blank" style=3D"color: =
#000000;">CHANGES.md</a> file in the release for a full list of =
changes since OpenSSL 3.6, and incompatible or potentially significant=
changes.</p>
<p>You can download the release from our <a =
href=3D"https://api.ourmailsender4.com/c/7d1cb1792b65b49a1f9991810b57ef47_c=
06292e9254be5de2894e963184558d8?sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335=
d569da0a16bbee4bf9e1a305981c&aid=3DXp2h" data-mce-href=3D"https://www.=
openssl-library.org/source/" style=3D"color: #000000;">download =
page</a> or from the <a href=3D"https://api.ourmailsender4.=
com/c/b8559d1afa669ed8739d07955cf34808_74e0830acfffc45c030590f8e400ee51?=
sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=
=3DXp2h" data-mce-href=3D"https://github.com/openssl/openssl/releases/tag/o=
penssl-3.6.0" target=3D"_blank" style=3D"color: #000000;">GitHub release =
page</a>.</p>
<p>OpenSSL 40 is <b>not</b> a <strong>long-term stable (LTS) =
release</strong>. Per <a href=3D"https://api.ourmailsender4.=
com/c/b881f0e6ae1704077aa3da789378ccb3_e61475d923fea6e5a16540bacee1e32a?=
sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=
=3DXp2h" style=3D"color: #000000;">OpenSSL=E2=80=99s LTS policy</a>, 4.0 =
will be <strong>supported until May 14, 2027</strong>.</p>
<p>The next release will be OpenSSL 4.1 in October 2026. Follow us on =
GitHub, <a href=3D"https://api.ourmailsender4.com/c/9e3706a4a6a61466d5efdb7=
b0c42271e_941e27a5b563b812a879b830f4fc7c72?sid=3Ddae27000e2c035ddc147fdc8bf=
3020d7_0335d569da0a16bbee4bf9e1a305981c&aid=3DXp2h" style=3D"color: =
#000000;">OpenSSL Communities</a> and our <a href=3D"https://api.=
ourmailsender4.com/c/550a8070397e428a25b1f275de0d8626_51e464af4eb3285df0bd8=
82d1723d6f0?sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1=
a305981c&aid=3DXp2h" style=3D"color: #000000;">Blog</a>.=
</p></div></td></tr></table></td></tr></table><table align=3D"center" =
class=3D"" style=3D"max-width: 100%; min-width: 100%; " width=3D"100%" =
cellPadding=3D"0" cellSpacing=3D"0"><tr><td align=3D"center" =
style=3D"padding-top: 0px; padding-left: 0px; padding-right: 0px; =
padding-bottom: 20px; background-color: transparent; " width=3D"100%" =
valign=3D"top"><table align=3D"center" style=3D"min-width: 100%; =
border-collapse: collapse; border-top-color: #f4f4f4; border-top-style: =
solid; border-top-width: 2px; mso-table-lspace: 0pt; mso-table-rspace: 0pt;=
-ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%; " =
width=3D"100%" cellPadding=3D"0" cellSpacing=3D"0"><tr><td =
style=3D"-ms-text-size-adjust: 100%; mso-line-height-rule: exactly; =
-webkit-text-size-adjust: 100%; "><span/></td></tr></table></td></tr></tabl=
e><table align=3D"center" class=3D"" style=3D"max-width: 100%; min-width: =
100%; " width=3D"100%" cellPadding=3D"0" cellSpacing=3D"0"><tr><td =
style=3D"padding-top: 0; padding-left: 0; padding-right: 0; padding-bottom:=
0; " width=3D"100%"><table align=3D"center" style=3D"max-width: 100%; " =
width=3D"100%" cellPadding=3D"0" cellSpacing=3D"0"><tr><td =
style=3D"padding-top: 0px; border-width: 0; padding-left: 0px; =
padding-right: 0px; padding-bottom: 10px; background-color: transparent; " =
width=3D"100%"><div style=3D"color: #000000; position: relative; font-size:=
14px; textAlign: left; word-break: break-word; font-family: arial; =
font-weight: normal; mso-line-height-rule: exactly; line-height: =
normal;letter-spacing: normal; "><div style=3D"text-align: center;" =
data-mce-style=3D"text-align: center;"><a href=3D"https://api.=
ourmailsender4.com/c/1fa7b36878fdf98c90d98270e267bee0_0b6739f3a6b1b890c20c9=
b7ff6377422?sid=3Ddae27000e2c035ddc147fdc8bf3020d7_0335d569da0a16bbee4bf9e1=
a305981c&aid=3DXp2h" target=3D"_blank" rel=3D"noopener" =
data-mce-href=3D"https://openssl-corporation.org" style=3D"color: =
#000000;">OpenSSL Corporation</a>, Inc. 40 East Main Street, Newark, =
<br>New Castle County, 19711, USA</div></div></td></tr></table></td></tr></=
table><table align=3D"center" class=3D"" style=3D"max-width: 100%; =
min-width: 100%; " width=3D"100%" cellPadding=3D"0" =
cellSpacing=3D"0"><tr><td style=3D"padding-top: 0px; padding-left: 0px; =
padding-right: 0px; padding-bottom: 0px; " width=3D"100%"><table =
align=3D"center" style=3D"max-width: 100%; " width=3D"100%" =
cellPadding=3D"0" cellSpacing=3D"0"><tr><td style=3D"padding-top: 0px; =
padding-left: 0px; padding-right: 0px; padding-bottom: 10px; =
background-color: transparent; " width=3D"100%"><div style=3D"color: =
#000000; position: relative; font-size: 14px; textAlign: left; word-break: =
break-word; font-family: arial; font-weight: normal; mso-line-height-rule: =
exactly; line-height: normal;letter-spacing: normal; "><div =
style=3D"text-align: center;" data-mce-style=3D"text-align: center;"><span =
style=3D"background-color: transparent;" data-mce-style=3D"background-color=
: transparent;"><a href=3D"https://api.ourmailsender4.com/api/unsubscribe?=
key=3D66eed5f3cb47555fe0576c05590dea39ff122ca4661e2d6338ee63f9601d47b470f89=
254e7bb03853840f14224c2dff6_c23d85639e931eb2d14b26d34ea94514" =
data-mce-href=3D"https://api.ourmailsender4.com/api/unsubscribe?=
key=3D66eed5f3cb47555fe0576c05590dea39ff122ca4661e2d6338ee63f9601d47b470f89=
254e7bb03853840f14224c2dff6_c23d85639e931eb2d14b26d34ea94514" =
style=3D"color: #000000;">Unsubscribe</a> | <a =
href=3D"https://api.ourmailsender4.com/api/update?key=3D66eed5f3cb47555fe05=
76c05590dea39ff122ca4661e2d6338ee63f9601d47b470f89254e7bb03853840f14224c2df=
f6_c23d85639e931eb2d14b26d34ea94514" data-mce-href=3D"https://api.=
ourmailsender4.com/api/update?key=3D66eed5f3cb47555fe0576c05590dea39ff122ca=
4661e2d6338ee63f9601d47b470f89254e7bb03853840f14224c2dff6_c23d85639e931eb2d=
14b26d34ea94514" style=3D"color: #000000;">Update Profile</a> | <=
a href=3D"https://api.ourmailsender4.com/api/junk?key=3D66eed5f3cb47555fe05=
76c05590dea39ff122ca4661e2d6338ee63f9601d47b470f89254e7bb03853840f14224c2df=
f6_c23d85639e931eb2d14b26d34ea94514" data-mce-href=3D"https://api.=
ourmailsender4.com/api/junk?key=3D66eed5f3cb47555fe0576c05590dea39ff122ca46=
61e2d6338ee63f9601d47b470f89254e7bb03853840f14224c2dff6_c23d85639e931eb2d14=
b26d34ea94514" data-mce-selected=3D"inline-boundary" style=3D"color: =
#000000;">Report Junk</a></span></div></div></td></tr></table></td></tr></t=
able><table align=3D"center" class=3D"" style=3D"max-width: 100%; =
min-width: 100%; " width=3D"100%" cellPadding=3D"0" =
cellSpacing=3D"0"><tr><td style=3D"padding-top: 0; padding-left: 0; =
padding-right: 0; padding-bottom: 0; " width=3D"100%"><table =
align=3D"center" style=3D"max-width: 100%; " width=3D"100%" =
cellPadding=3D"0" cellSpacing=3D"0"><tr><td style=3D"padding-top: 0px; =
border-width: 0; padding-left: 0px; padding-right: 0px; padding-bottom: =
20px; background-color: transparent; " width=3D"100%"><div style=3D"color: =
#000000; position: relative; font-size: 14px; textAlign: left; word-break: =
break-word; font-family: arial; font-weight: normal; mso-line-height-rule: =
exactly; line-height: normal;letter-spacing: normal; "><div =
style=3D"text-align: center;"><a href=3D"https://api.ourmailsender4.=
com/templatePreview?key=3D66eed5f3cb47555fe0576c05590dea39ff122ca4661e2d633=
8ee63f9601d47b470f89254e7bb03853840f14224c2dff6_c23d85639e931eb2d14b26d34ea=
94514&html=3Dtrue" target=3D"_blank" rel=3D"noopener" style=3D"color: =
#000000;">View this email in your browser</a></div></div></td></tr></table>=
</td></tr></table></td></tr></table></td></tr></table></td></tr></table></t=
d></tr></table></body></html>
----_NmP-7101de82d1f3f81e-Part_1--