OpenSSL version 1.1.1h published

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

OpenSSL version 1.1.1h published

openssl
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


   OpenSSL version 1.1.1h released
   ===============================

   OpenSSL - The Open Source toolkit for SSL/TLS
   https://www.openssl.org/

   The OpenSSL project team is pleased to announce the release of
   version 1.1.1h of our open source toolkit for SSL/TLS. For details
   of changes and known issues see the release notes at:

        https://www.openssl.org/news/openssl-1.1.1-notes.html

   OpenSSL 1.1.1h is available for download via HTTP and FTP from the
   following master locations (you can find the various FTP mirrors under
   https://www.openssl.org/source/mirror.html):

     * https://www.openssl.org/source/
     * ftp://ftp.openssl.org/source/

   The distribution file name is:

    o openssl-1.1.1h.tar.gz
      Size: 9810045
      SHA1 checksum: 8d0d099e8973ec851368c8c775e05e1eadca1794
      SHA256 checksum: 5c9ca8774bd7b03e5784f26ae9e9e6d749c9da2438545077e6b3d755a06595d9

   The checksums were calculated using the following commands:

    openssl sha1 openssl-1.1.1h.tar.gz
    openssl sha256 openssl-1.1.1h.tar.gz

   Yours,

   The OpenSSL Project Team.

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEhlersmDwVrHlGQg52cTSbQ5gRJEFAl9p9DIACgkQ2cTSbQ5g
RJG6pAf/Y6B3I9pwD6MG7lm3ywEqp2dAwYym84l39K6LrBFPOg76GmHLby92Se5/
N2S5uHPCcXrBdtHLZZTi1Tn3rwMN6EAJmedZJvMwoxeKJxNjZ2f8K8SjgUkuimSa
dKbXtv92uDNRpD4X3Fv+uRatmbvygdjduwJWqgJ88ahz/IM7x1lv8E8GNnkPNBfA
9M9rDP5ThiQAetbefHBq9vb6wywwbi0FGTnXkeaYpyKDXmob0VWUdI0olMFLIUAG
ZAQAD8XEPnJBVh4qCOlVy0n/5+jzcOiqcwJyORQc/U0wkV71I9XigW9H7wgg6skD
iVQQe2QEODbEbtx9iMPsN4Ssmfk+VA==
=OYam
-----END PGP SIGNATURE-----
Reply | Threaded
Open this post in threaded view
|

RE: OpenSSL version 1.1.1h published

Michael Wojcik
changelog.html hasn't been updated since 1.1.1e.

https://www.openssl.org/news/changelog.html#openssl-111 shows:

-----
OpenSSL 1.1.1
Changes between 1.1.1e and 1.1.1f [xx XXX xxxx]
Changes between 1.1.1d and 1.1.1e [17 Mar 2020]
-----

I noticed this because the Release Notes page (https://www.openssl.org/news/openssl-1.1.1-notes.html) has a link to changelog.html, and I popped over there to see what minor changes might be in h. (I haven't downloaded it yet because it's usually someone else on the team who does that these days.)

--
Michael Wojcik
Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL version 1.1.1h published

Matt Caswell-2


On 22/09/2020 15:03, Michael Wojcik wrote:
> changelog.html hasn't been updated since 1.1.1e.
>
> https://www.openssl.org/news/changelog.html#openssl-111 shows:

That's the master Changelog. Confusing I know.

The link to the 1.1.1 Changelog  is at the top of the page.

Matt


>
> -----
> OpenSSL 1.1.1
> Changes between 1.1.1e and 1.1.1f [xx XXX xxxx]
> Changes between 1.1.1d and 1.1.1e [17 Mar 2020]
> -----
>
> I noticed this because the Release Notes page (https://www.openssl.org/news/openssl-1.1.1-notes.html) has a link to changelog.html, and I popped over there to see what minor changes might be in h. (I haven't downloaded it yet because it's usually someone else on the team who does that these days.)
>
> --
> Michael Wojcik
>
Reply | Threaded
Open this post in threaded view
|

RE: OpenSSL version 1.1.1h published

Dr. Matthias St. Pierre
> On 22/09/2020 15:03, Michael Wojcik wrote:
> > changelog.html hasn't been updated since 1.1.1e.
> >
> > https://www.openssl.org/news/changelog.html#openssl-111 shows:
>
> That's the master Changelog. Confusing I know.
>
> The link to the 1.1.1 Changelog  is at the top of the page.

It is indeed confusing, and it shouldn't be. See
https://github.com/openssl/openssl/pull/12967


Regards,
Matthias


Reply | Threaded
Open this post in threaded view
|

Re: OpenSSL version 1.1.1h published

Tomas Mraz-2
On Thu, 2020-09-24 at 07:01 +0000, Dr. Matthias St. Pierre wrote:

> > On 22/09/2020 15:03, Michael Wojcik wrote:
> > > changelog.html hasn't been updated since 1.1.1e.
> > >
> > > https://www.openssl.org/news/changelog.html#openssl-111 shows:
> >
> > That's the master Changelog. Confusing I know.
> >
> > The link to the 1.1.1 Changelog  is at the top of the page.
>
> It is indeed confusing, and it shouldn't be. See
> https://github.com/openssl/openssl/pull/12967

But will we have to always update Changes.md and NEWS.md on all newer
branches (imagine the situation when 3.0 is released and we have also a
3.0 branch) when we add something to older release?

I think it would be better to just add a comment that the older branch
changes are tracked elsewhere.

--
Tomáš Mráz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb
[You'll know whether the road is wrong if you carefully listen to your
conscience.]


Reply | Threaded
Open this post in threaded view
|

RE: OpenSSL version 1.1.1h published

Dr. Matthias St. Pierre
> I think it would be better to just add a comment that the older branch
> changes are tracked elsewhere.

The note is already present, it's in the second paragraph of
https://www.openssl.org/news/changelog.html
but it is confusing nevertheless and it would be more useful if the
entire information would be visible on the website (in HTML).

Currently, I am updating the two documents on master occasionally.
This is not ideal, that's why I proposed in #11346 that we  always update
the information on master and backport the relevant changes to the stable
branches (for 3.0 and beyond only, because 1.1.1 is not in markdown yet.

https://github.com/openssl/openssl/pull/11346


Matthias