{"id":168753,"date":"2026-04-14T23:12:07","date_gmt":"2026-04-14T21:12:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0"},"modified":"2026-04-14T23:12:07","modified_gmt":"2026-04-14T21:12:07","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","title":{"rendered":"OpenSSL 4.0.0 kr\u00fcptograafia raamatukogu v\u00e4ljaanne","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V\u00e4lja on antud OpenSSL 4.0.0 teek, mis pakub rakendust TLS-protokollide ja erinevate kr\u00fcptimise algoritmide jaoks. OpenSSL 4.0 liigitatakse tavalise toetusega v\u00e4ljalaskeks, mille uuendusi v\u00e4ljastatakse 13 kuu jooksul. Eelmiste harude OpenSSL 3.6, 3.5 LTS, 3.4 ja 3.0 LTS tugi kestab kuni 2026. aasta novembri, 2030. aprilli, 2026. aasta oktoobri ja 2026. aasta septembrini vastavalt. Projekti kood levitatakse Apache 2.0 litsentsi alusel.     <\/p>\n<p>Peamised uuendused:   <\/p>\n<ul>\n<li class=\"l\"> Lisatud tugi TLS-laiendusele ECH (Encrypted ClientHello, RFC 9849), mille eesm\u00e4rk on kr\u00fcpteerida teavet TLS-seansside parameetrite kohta, n\u00e4iteks n\u00f5utud domeeninimi. Erinevalt ESNI (Encrypted Server Name Indication) laiendusest kr\u00fcpteeritakse ECH-is kogu TLS-s\u00f5num ClientHello tasemel, mis v\u00f5imaldab blokeerida lekkeid v\u00e4ljade kaudu, mida ESNI ei kata, nagu n\u00e4iteks PSK (Pre-Shared Key) v\u00e4li.\n<li class=\"l\"> Lisatud tugi RFC 8998-s m\u00e4\u00e4ratletud algoritmidele, mis kasutavad Hiinas standardiseeritud kr\u00fcptoalgoritmide kogumit SM2: digitaalse allkirja l\u00f5imimise algoritm sm2sig_sm3, v\u00f5tmevahetusgrupp curveSM2 ja postkvantitehnoloogia grupp curveSM2MLKEM768.\n<li class=\"l\"> Lisatud kr\u00fcptograafiline r\u00e4simisfunktsioon cSHAKE, mis p\u00f5hineb SHA-3 algoritmil ja v\u00f5imaldab luua erinevaid h\u00e4sse sama sisendi p\u00f5hjal, et kaitsta andmete uuesti kasutamise r\u00fcnnakute eest.\n<li class=\"l\"> Lisatud h\u00fcbriidne algoritm \u00abML-DSA-MU\u00bb, mis kombineerib postkvantse digiallkirjastamise algoritmi ML-DSA (CRYSTALS-Dilithium) klassikalise hash-funktsiooniga SHAKE256.\n<li class=\"l\"> Lisatud SNMP KDF v\u00f5tme loomise funktsioonide tugi, mis p\u00f5hinevad HMAC-SHA-l ja SRTP KDF, mis p\u00f5hineb AES-CM-l, mida kasutatakse v\u00f5rguprotokollides SNMPv3 ja SRTP kr\u00fcptograafiliste v\u00f5tmete loomiseks.\n<li class=\"l\"> Meeskonda \u00abopenssl fipsinstall\u00bb on lisatud valik \u00ab-defer_tests\u00bb, mis v\u00f5imaldab FIPS-modulite installimise ajal testide k\u00e4ivitamist edasi l\u00fckata.\n<li class=\"l\"> Windowsi platvormil on \u0440\u0435\u0430\u043b\u0438\u0437eritud tugi staatilise v\u00f5i d\u00fcnaamilise sidumise kasutamiseks Visual C++ Runtime\u2019iga.\n<li class=\"l\"> TLS 1.2-s on lisatud toe saamine v\u00f5tmevahetuse lepingule, mis p\u00f5hineb FFDHE algoritmil, vastavalt RFC 7919-le.\n<li class=\"l\"> SSLv3 ja SSLv2 Client Hello toe l\u00f5petamine.\n<li class=\"l\"> D\u00fcnaamiliselt laaditavate mootorite tugi on eemaldatud, mille asemel peaks OpenSSL-i funktsionaalsuse laiendamiseks kasutama lisatavate pakkujate kontseptsiooni.\n<li class=\"l\"> TLS-i kompileerimise etapis on saadud ridadest v\u00e4lja l\u00fclitatud vananenud elliptiliste k\u00f5verate tugi. Tagasi toomiseks saab kasutada valikut \u00abenable-tls-deprecated-ec\u00bb.\n<li class=\"l\"> Kommando c_rehash on eemaldatud, asenduseks tuleb kasutada k\u00e4sku \u00abopenssl rehash\u00bb.\n<li class=\"l\"> K\u00e4skonnast \u00abopenssl ca\u00bb on eemaldatud vananenud valik \u00abmsie-hack\u00bb.\n<li class=\"l\"> On eemaldatud toetused kohandatud meetoditele EVP_CIPHER, EVP_MD, EVP_PKEY ja EVP_PKEY_ASN1.\n<li class=\"l\"> Eemaldatud on vananenud SSL\/TLS-funktsioonid, mis on seotud protokollide fikseeritud versioonidega, n\u00e4iteks \u00abTLSv1_client_method()\u00bb.\n<li class=\"l\"> On eemaldatud vananenud funktsioonid ERR_get_state(), ERR_remove_state() ja ERR_remove_thread_state().\n<li class=\"l\"> Toetuse l\u00f5petamine sihtplatvormidele darwin-i386{,-cc} ja darwin-ppc{,64}{,-cc}.  <\/ul>\n<p>Allikas: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65208\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. OpenSSL 4.0 \u043e\u0442\u043d\u0435\u0441\u0451\u043d \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0432\u0435\u0442\u043e\u043a OpenSSL 3.6, 3.5 LTS, 3.4 \u0438 3.0 LTS \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430, \u0430\u043f\u0440\u0435\u043b\u044f 2030 \u0433\u043e\u0434\u0430, \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430 \u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-168753","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-14T21:12:07+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-14T21:12:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47K\u00fcberturbe teegi OpenSSL 4.0.0 v\u00e4ljaanne | ProHoster","description":"Avati OpenSSL 4.0.0 teek, mis pakub TLS protokollide ja erinevate kr\u00fcptimisalgoritmide rakendust.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-14T21:12:07+00:00","article:modified_time":"2026-04-14T21:12:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/168753","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=168753"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/168753\/revisions"}],"predecessor-version":[{"id":169172,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/168753\/revisions\/169172"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=168753"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=168753"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=168753"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}