OpenSSL 4.1.0 has been released, featuring full DTLS 1.3 support, which is significant for applications requiring low latency, such as real-time gaming and VoIP. The release maintains API and ABI compatibility with the previous 4.0 line, allowing existing users to upgrade without recompiling, although it comes with four known DTLS bugs. In addition to DTLS enhancements, the release includes post-quantum optimizations and support for various protocols and architectures, although certain features like Connection IDs are not supported. Users are advised to review the release notes and test the update in their environments before deploying it widely due to the documented issues

OpenSSL 4.1.0 Released With DTLS 1.3 Support

OpenSSL 4.1.0 shipped today as a feature release that stays API- and ABI-compatible with the OpenSSL 4.0 line, so existing users can upgrade without recompiling. The headline addition is full DTLS 1.3 support (RFC 9147), including a rebuilt listener API and tunables for pending connections and datagram sizes. But the release also documents four known DTLS bugs and had earlier gone to a beta-as-final after two DTLS security issues forced a pause. Alongside that, it adds post-quantum optimizations, GREASE and IKEv2 KDF support, new MSVC 2013 build targets, and drops Windows Itanium and CE builds.

OpenSSL 4.1.0 Released With DTLS 1.3 Support @ Linux Compatible