OpenSSL releases version 4.1.0 with new cryptographic optimizations
The OpenSSL project has shipped OpenSSL 4.1.0, a feature release that drops the no-ecdsa and no-ecdh Configure options, switches the tsget utility to the Net::Curl::Easy library, and adds performance optimizations for ML-DSA, ML-KEM and AES-CBC operations on ppc64le and x86_64 architectures. The release also adds two new MSVC 2013 build targets and documents three known issues affecting DTLS 1.3 handling.
GoKawiil's interpretation of the reporting above, not reported fact.
The dropped Configure options and tsget dependency change mean some users will need to adjust build scripts or install new dependencies before upgrading, since the old WWW::Curl::Easy library is no longer maintained. The documented DTLS 1.3 bugs around retransmission and error reporting could cause dropped connections or stalled applications, so developers relying on DTLS may want to wait for the planned fixes before adopting this release in production.
- OpenSSL 4.1.0 removes the no-ecdsa and no-ecdh Configure flags, requiring use of no-ec instead
- tsget now depends on Net::Curl::Easy, so users must install it before upgrading
- Three known DTLS 1.3 issues remain unresolved, including a retransmission bug and misreported connection errors
Source: github.com, 2026-10-23
Published there as: “OpenSSL 4.1.0”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.