What are the current recommendations regarding OpenSSL(s) if any?

English support forum

Moderators: white, Hacker, petermad, Stefan2

Post Reply
User avatar
beb
Senior Member
Senior Member
Posts: 436
Joined: 2009-09-20, 08:03 UTC
Location: Odesa, Ukraine

What are the current recommendations regarding OpenSSL(s) if any?

Post by *beb »

There's a semi-hidden page (it won't visibly available unless you've got a direct link):
https://www.ghisler.com/openssl/
The information in there looks obsolete and contradictory
(e.g. it has a link to the 3rd party OpenSSL 1.x source and states it's 'currently unavailable' while it's been available again for pretty long, and it does not mention OpenSSL 3.x at all).

Meanwhile, history says as follows:
https://www.ghisler.com/history.txt
https://www.ghisler.com/history1050.txt
18.03.22 Added: Support for OpenSSL 3.0 from https://curl.se/windows/ - just put libssl-3.dll and libcrypto-3.dll (libssl-3-x64.dll and libcrypto-3-x64.dll for 64-bit) in the program directory (not the 64 subdirectory!) (32/64)
Since then I have completely removed OpenSSL 1.x entries within the %commander_path% and kept using exclusively the OpenSSL 3.x (though I cannot be sure if it fits all the user cases).

But I can't even remember when it was the last time when I could get something useful from the curl.se related to the subject in question.

So I'm getting the OpenSSL 3.x libs from the link (it has the OpenSSL 1.x as well but I don't know if it's suitable for TC since I don't use 1.x anymore): https://slproweb.com/products/Win32OpenSSL.html
And I still keep the link for the OpenSSL 1.x (just in case):
https://indy.fulgan.com/SSL/

Since I cannot see any actual recommendations in this regard I'm just sharing my experience.
At the same time, may you have other opinions and would share ones, that would be highly appreciated.
#278521 User License
Total Commander [always the latest version, including betas] x86/x64 on Win10 x64/Android 10
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48232
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Re: What are the current recommendations regarding OpenSSL(s) if any?

Post by *ghisler(Author) »

OpenSSL 3 has both some advantages and some disadvantages:
1. It supports the newest encryption standards,
but
2. It removed some older standards like DSA which are no longer secure, but may still be only choice on some older NAS devices.
Author of Total Commander
https://www.ghisler.com
Post Reply