OpenSSL 1.1.0 系列发布更新

OpenSSL 1.1.0 系列发布了更新，主要更新如下：

• Windows command-line tool supports UTF-8 opt-in option for arguments and console input. Setting OPENSSL_WIN32_UTF8 environment variable (to any value) allows Windows user to access PKCS#12 file generated with Windows CryptoAPI and protected with non-ASCII password, as well as files generated under UTF-8 locale on Linux also protected with non-ASCII password. [Andy Polyakov]

• To mitigate the SWEET32 attack (CVE-2016-2183), 3DES cipher suites have been disabled by default and removed from DEFAULT, just like RC4. See the RC4 item below to re-enable both.[Rich Salz]

• The method for finding the storage location for the Windows RAND seed file has changed. First we check %RANDFILE%. If that is not set then we check the directories %HOME%, %USERPROFILE% and %SYSTEMROOT% in that order. If all else fails we fall back to C:\. [Matt Caswell]

• The EVP_EncryptUpdate() function has had its return type changed from void to int. A return of 0 indicates and error while a return of 1 indicates success. [Matt Caswell]

详细更细说明点击这里：

• https://github.com/openssl/openssl/blob/master/CHANGES

• https://www.openssl.org/news/changelog.html

下载：

• https://www.openssl.org/source/

• Source code (zip)

• Source code (tar.gz)