Embed SSL and TLS protocols support into your great projects

OpenSSL 1.1.1h

September, 23rd 2020 - 9.4 MB - Freeware

Free Download

Security Status

Latest Version

OpenSSL 3.3.0
Operating System

Mac OS X
User Rating

Click to vote
Author / Product

OpenSSL Software Foundation / External Link
Filename

openssl-1.1.1h.tar.gz

Sometimes latest versions of the software can cause issues when installed on older devices or devices running an older version of the operating system. Software makers usually fix these issues but it can take them some time. What you can do in the meantime is to download and install an older version of OpenSSL 1.1.1h.

For those interested in downloading the most recent release of OpenSSL for Mac or reading our review, simply click here.

All old versions distributed on our website are completely virus-free and available for download at no cost.

We would love to hear from you

If you have any questions or ideas that you want to share with us - head over to our Contact page and let us know. We value your feedback!

Download OpenSSL 1.1.1h

OpenSSL 1.1.1h Screenshots

The images below have been resized. Click on them to view the screenshots in full size.

What's new in this version:

- Certificates with explicit curve parameters are now disallowed in verification chains if the X509_V_FLAG_X509_STRICT flag is used. [Tomas Mraz]
- The 'MinProtocol' and 'MaxProtocol' configuration commands now silently ignore TLS protocol version bounds when configuring DTLS-based contexts, and conversely, silently ignore DTLS protocol version bounds when configuring TLS-based contexts. The commands can be repeated to set bounds of both types. The same applies with the corresponding "min_protocol" and "max_protocol" command-line switches, in case some application uses both TLS and DTLS.
- SSL_CTX instances that are created for a fixed protocol version (e.g. TLSv1_server_method()) also silently ignore version bounds. Previously attempts to apply bounds to these protocol versions would result in an error. Now only the "version-flexible" SSL_CTX instances are subject to limits in configuration files in command-line options. [Viktor Dukhovni]
- Handshake now fails if Extended Master Secret extension is dropped on renegotiation [Tomas Mraz]
- The Oracle Developer Studio compiler will start reporting deprecated APIs