If anyone here is thinking about supporting TLS 1.3, every indication is that you will need openSSL 1.1.1.
Fedora 29 pre-beta is still one 1.1.1-pre9, I hope to see 1.1.1 release soonish. Hopefully Redhat will be backporting support in RHEL7 so we will have it in C7. Part of the challenge is that there is an API change from 1.1.0 to 1.1.1. Got to love it...
Further complication is no FIPS support yet in 1.1.1. That is next on the docket for openSSL.
-------- Forwarded Message -------- Subject: [openssl-users] OpenSSL version 1.1.1 published Date: Tue, 11 Sep 2018 13:42:31 +0000 From: OpenSSL openssl@openssl.org Reply-To: openssl@openssl.org, openssl-users@openssl.org Organisation: OpenSSL Project To: openssl-project@openssl.org, OpenSSL User Support ML openssl-users@openssl.org, OpenSSL Announce ML openssl-announce@openssl.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
OpenSSL version 1.1.1 released ===============================
OpenSSL - The Open Source toolkit for SSL/TLS https://www.openssl.org/
The OpenSSL project team is pleased to announce the release of version 1.1.1 of our open source toolkit for SSL/TLS. For details of changes and known issues see the release notes at:
https://www.openssl.org/news/openssl-1.1.1-notes.html
OpenSSL 1.1.1 is available for download via HTTP and FTP from the following master locations (you can find the various FTP mirrors under https://www.openssl.org/source/mirror.html):
* https://www.openssl.org/source/ * ftp://ftp.openssl.org/source/
The distribution file name is:
o openssl-1.1.1.tar.gz Size: 8337920 SHA1 checksum: e4559f31dca37ce815e0c7135488b747745a056d SHA256 checksum: 2836875a0f89c03d0fdf483941512613a50cfb421d6fd94b9f41d7279d586a3d
The checksums were calculated using the following commands:
openssl sha1 openssl-1.1.1.tar.gz openssl sha256 openssl-1.1.1.tar.gz
Yours,
The OpenSSL Project Team.