Skip to content

AmiSSL 5.9
Compare
Choose a tag to compare
@Futaura Futaura released this 30 May 20:45
· 49 commits to master since this release
5.9
c94314e
This commit was signed with the committer’s verified signature.
Futaura Oliver Roberts
GPG key ID: 08338C1B1A77C1CB
Learn about vigilant mode.

Downloads License Donate Twitter Follow

About

This is version 5.9 of the open-source based AmiSSL library for Amiga based operating systems. AmiSSL v5 is a new major release which has been updated with full compatibility with OpenSSL 3.1. This includes important security related fixes, a built-in HTTP(S) client and comes with new encryption ciphers which are required nowadays to connect to modern SSL-based services such as HTTPS and SSH.

Changes

  • Updated OpenSSL backend to full compatibility with the latest OpenSSL 3.1.1 (30.5.2023) version, which includes one moderate and three low severity fixes for newly identified vulnerabilities:
    • Mitigate for very slow OBJ_obj2txt() performance with gigantic OBJECT IDENTIFIER sub-identities. (CVE-2023-2650)
    • Fixed documentation of X509_VERIFY_PARAM_add0_policy(). (CVE-2023-0466)
    • Fixed handling of invalid certificate policies in leaf certificates. (CVE-2023-0465)
    • Limited the number of nodes created in a policy tree. (CVE-2023-0464)
  • Updated root certificates to latest Mozilla-based bundle provided by https://curl.se/docs/caextract.html dated 30.5.2023.
  • Added 8K minimum stack cookie to example programs.

For details on all changes, see the full commit log.

Backwards Compatibility

All applications compiled to use previous versions of AmiSSL v5 will automatically use this latest version once installed. Old applications will continue to use AmiSSL v4 or older and will need to be recompiled with the updated SDK in order to start using AmiSSL v5. Besides this difference, AmiSSL v5 can be installed on top of any previous AmiSSL versions, which ensures that applications compiled for AmiSSL v1/v2/v3/v4 continue to work.

Requirements

AmigaOS 4.0+/PPC, AmigaOS 3.0+/68020+ or MorphOS

IMPORTANT NOTE

This release comes with binaries for the AmigaOS4/PPC and AmigaOS3/m68k platform only. Unfortunately, due to lack of motivated developers we couldn't provide native binaries for the MorphOS/PPC or AROS (PPC, i386, x86_64) platform. If you are, however, interested in seeing AmiSSL v5 being ported to these other Amiga-based platforms, please try to find motivated and talented developers who join our team as maintainers for these alternative platforms. In addition, if you are a MorphOS or AROS developer yourself, feel free to send pull requests to see your platform supported in one of the next releases.

Download

Please find the necessary OS specific installation archives and the developer SDK attached to this release below. The SHA256 checksums for the archives are:

d1e1c05801ffb418ad5acdc809e651d5828c873abcdfdd1087071c39e3aa2209  AmiSSL-5.9-OS3.lha
5f4481ad49b372881b6d5b50d1d75bd04d1181bea277f308df54dd7d87ca14a1  AmiSSL-5.9-OS4.lha
678e3ebfb97aed77af48ae102d5a4ea6814708462804a4e6a5e8ba55e90b8196  AmiSSL-5.9-SDK.lha
Assets 5