Hacker News Viewer

OpenSSL 4.0.0

by petecooper on 4/14/2026, 5:45:34 PM

https://github.com/openssl/openssl/releases/tag/openssl-4.0.0

Comments

by: bensyverson

I just updated to 3.5x to get pq support. Anything that might tempt me to upgrade to 4.0?

4/14/2026, 7:46:19 PM


by: caycep

How is OpenSSl these days? I vaguely remember the big ruckus a while back, was it Heartbleed? where everyone to their horror realized it was maybe 1 or 2 people trying to maintain OpenSSL, and the OpenBSD people then throwing manpower at it to clear up a lot of old outstanding bugs. It seems like it is on firmer/more organized footing these days?

4/14/2026, 7:23:20 PM


by: capitol_

Finally encrypted client hello support \o/

4/14/2026, 6:10:23 PM


by: rwmj

Compared to OpenSSL 3 this transition has been very smooth. Only dropping of "Engines" was a problem at all, and in Fedora most of those dependencies have been changed.

4/14/2026, 7:15:12 PM


by: yjftsjthsd-h

As a complete non-expert:<p>On the one hand, looks like decent cleanup. (IIRC, engines in particular will not be missed).<p>On the other hand, breaking compatibility is always a tradeoff, and I still remember 3.x being... not universally loved.

4/14/2026, 6:11:57 PM


by: ge96

Just in time for the suckerpinch video

4/14/2026, 6:40:35 PM


by: georgthegreat

<a href="https:&#x2F;&#x2F;www.haproxy.com&#x2F;blog&#x2F;state-of-ssl-stacks" rel="nofollow">https:&#x2F;&#x2F;www.haproxy.com&#x2F;blog&#x2F;state-of-ssl-stacks</a><p>According to this one should not be using v3 at all..

4/14/2026, 7:10:40 PM


by: jmclnx

I wonder how hard it is to move from 3.x to 4.0.0 ?<p>From what I remember hearing, the move from 2 to 3 was hard.

4/14/2026, 6:58:00 PM