OpenSSL 4.1.0-alpha1 has been released, introducing full support for the DTLS 1.3 protocol, GREASE protocol handling, and various post-quantum cryptography optimizations. The update also significantly enhances performance on x86_64, PowerPC, and s390x architectures, while introducing breaking changes that necessitate careful testing during upgrades from the 4.0 line. Major features include improved handshake robustness for DTLS, an updated SSL listener API, and support for new algorithms, along with performance improvements for AES-CBC decryption. As this is an alpha release, further development is ongoing, and the final release date has yet to be determined

OpenSSL 4.1.0-alpha1 Adds DTLS 1.3, GREASE, and Post-Quantum Optimizations

OpenSSL 4.1.0-alpha1 drops as the first preview of the next feature-heavy release, landing atop the hardened 4.0.2 base. The update finally delivers full DTLS 1.3 support, standardizes GREASE protocol handling, and expands the SSL listener API to cover DTLS alongside QUIC. Significant performance gains come from AVX-optimized post-quantum cryptography operations on x86_64, PowerPC, and s390x, alongside deprecated configure flags and removed legacy Windows build targets. Upgrading from the 4.0 line requires careful testing, as certificate validation defaults now favor SANs over CNs and EC key handling has been standardized per RFC guidelines.

OpenSSL 4.1.0-alpha1 Adds DTLS 1.3, GREASE, and Post-Quantum Optimizations @ Linux Compatible