{"id":168753,"date":"2026-04-14T23:12:07","date_gmt":"2026-04-14T21:12:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0"},"modified":"2026-04-14T23:12:07","modified_gmt":"2026-04-14T21:12:07","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","title":{"rendered":"Az OpenSSL 4.0.0 kriptogr\u00e1fiai k\u00f6nyvt\u00e1r kiad\u00e1sa","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Megjelent az OpenSSL 4.0.0 k\u00f6nyvt\u00e1r, amely a TLS protokollok \u00e9s k\u00fcl\u00f6nb\u00f6z\u0151 titkos\u00edt\u00e1si algoritmusok megval\u00f3s\u00edt\u00e1s\u00e1t k\u00edn\u00e1lja. Az OpenSSL 4.0 norm\u00e1l t\u00e1mogat\u00e1si id\u0151szakkal rendelkezik, amely alatt 13 h\u00f3napon kereszt\u00fcl friss\u00edt\u00e9seket kap. A kor\u00e1bbi OpenSSL \u00e1gazatok, mint a 3.6, 3.5 LTS, 3.4 \u00e9s 3.0 LTS t\u00e1mogat\u00e1sa 2026 november\u00e9ig, 2030 \u00e1prilis\u00e1ig, 2026 okt\u00f3ber\u00e9ig \u00e9s 2026 szeptember\u00e9ig tart.     <\/p>\n<p>F\u0151 \u00fajdons\u00e1gok:   <\/p>\n<ul>\n<li class=\"l\"> T\u00e1mogat\u00e1s ker\u00fclt hozz\u00e1ad\u00e1sra az ECH (Encrypted ClientHello, RFC 9849) TLS-kiterjeszt\u00e9shez, amely a TLS-\u00fcl\u00e9sek param\u00e9tereir\u0151l, p\u00e9ld\u00e1ul a k\u00e9rt domainn\u00e9vr\u0151l sz\u00f3l\u00f3 inform\u00e1ci\u00f3k titkos\u00edt\u00e1s\u00e1ra szolg\u00e1l. Az ESNI (Encrypted Server Name Indication) kiterjeszt\u00e9st\u0151l elt\u00e9r\u0151en az ECH ahelyett, hogy az egyes mez\u0151k szintj\u00e9n titkos\u00edtana, az eg\u00e9sz TLS ClientHello \u00fczenetet titkos\u00edtja, amely lehet\u0151v\u00e9 teszi a PSK (Pre-Shared Key) mez\u0151n\u00e9l bek\u00f6vetkez\u0151 sziv\u00e1rg\u00e1sok blokkol\u00e1s\u00e1t.\n<li class=\"l\"> T\u00e1mogat\u00e1s ker\u00fclt hozz\u00e1ad\u00e1sra az RFC 8998-ban defini\u00e1lt algoritmusokhoz, amelyek a K\u00edn\u00e1ban szabv\u00e1nyos\u00edtott SM2 kriptogr\u00e1fiai algoritmusokat haszn\u00e1lj\u00e1k: az sm2sig_sm3 digit\u00e1lis al\u00e1\u00edr\u00e1s-gener\u00e1l\u00f3 algoritmus, a curveSM2 kulcscsere csoport \u00e9s a posztkvantum csoport, a curveSM2MLKEM768.\n<li class=\"l\"> Hozz\u00e1adva a cSHAKE kriptogr\u00e1fiai hash funkci\u00f3, amely a SHA-3 algoritmusra alapozva lehet\u0151v\u00e9 teszi k\u00fcl\u00f6nb\u00f6z\u0151 hash-ek gener\u00e1l\u00e1s\u00e1t az azonos bemeneti adatokb\u00f3l, v\u00e9delmet ny\u00fajtva az adatok \u00fajrahaszn\u00e1lat\u00e1val manipul\u00e1l\u00f3 t\u00e1mad\u00e1sok ellen.\n<li class=\"l\"> Hozz\u00e1adva a hibrid algoritmus &#171;ML-DSA-MU&#187;, amely a posztkvantum digit\u00e1lis al\u00e1\u00edr\u00e1si algoritmust, az ML-DSA-t (CRYSTALS-Dilithium) \u00f6tv\u00f6zi a klasszikus SHAKE256 hash f\u00fcggv\u00e9nnyel.\n<li class=\"l\"> Hozz\u00e1adva az SNMP KDF kulcsgener\u00e1l\u00f3 funkci\u00f3k t\u00e1mogat\u00e1sa HMAC-SHA alap\u00fa \u00e9s az AES-CM alap\u00fa SRTP KDF-hez, amelyeket az SNMPv3 \u00e9s SRTP h\u00e1l\u00f3zati protokollokban haszn\u00e1lnak kriptogr\u00e1fiai kulcsok l\u00e9trehoz\u00e1s\u00e1ra.\n<li class=\"l\"> Az &#171;openssl fipsinstall&#187; parancshoz hozz\u00e1adva lett a &#171;-defer_tests&#187; opci\u00f3, amely lehet\u0151v\u00e9 teszi a tesztek elhalaszt\u00e1s\u00e1t a FIPS modulok telep\u00edt\u00e9se sor\u00e1n.\n<li class=\"l\"> Windows platformon megval\u00f3s\u00edtva a statikus vagy dinamikus \u00f6sszekapcsol\u00e1s t\u00e1mogat\u00e1sa a Visual C++ Runtime-tal.\n<li class=\"l\"> A TLS 1.2-ben hozz\u00e1adva a kulcscsere egyeztet\u00e9s\u00e9nek t\u00e1mogat\u00e1sa az FFDHE algoritmus alapj\u00e1n, amely megfelel az RFC 7919-nek.\n<li class=\"l\"> Megsz\u00fcntett\u00e9k az SSLv3 \u00e9s SSLv2 Client Hello t\u00e1mogat\u00e1s\u00e1t.\n<li class=\"l\"> A dinamikusan bet\u00f6lthet\u0151 motorok t\u00e1mogat\u00e1s\u00e1t elt\u00e1vol\u00edtott\u00e1k, ehelyett az OpenSSL funkcionalit\u00e1s\u00e1nak b\u0151v\u00edt\u00e9s\u00e9hez a csatlakoztathat\u00f3 szolg\u00e1ltat\u00f3k koncepci\u00f3j\u00e1t kell haszn\u00e1lni.\n<li class=\"l\"> A TLS-ben a ford\u00edt\u00e1si szakaszban le van tiltva az elavult elliptikus g\u00f6rb\u00e9k t\u00e1mogat\u00e1sa. A r\u00e9gi t\u00e1mogat\u00e1s vissza\u00e1ll\u00edt\u00e1s\u00e1hoz az &#171;enable-tls-deprecated-ec&#187; opci\u00f3t lehet haszn\u00e1lni.\n<li class=\"l\"> Az c_rehash eszk\u00f6z elt\u00e1vol\u00edtva, helyette az &#171;openssl rehash&#187; parancs haszn\u00e1lata aj\u00e1nlott.\n<li class=\"l\"> Az &#171;openssl ca&#187; parancsb\u00f3l elt\u00e1vol\u00edtva az elavult &#171;msie-hack&#187; opci\u00f3.\n<li class=\"l\"> Az EVP_CIPHER, EVP_MD, EVP_PKEY \u00e9s EVP_PKEY_ASN1 saj\u00e1t m\u00f3dszereinek t\u00e1mogat\u00e1sa megsz\u0171nt.\n<li class=\"l\"> Elt\u00e1vol\u00edt\u00e1sra ker\u00fcltek az SSL\/TLS elavult funkci\u00f3i, amelyek a protokollok r\u00f6gz\u00edtett verzi\u00f3ihoz kapcsol\u00f3dnak, p\u00e9ld\u00e1ul az &#171;TLSv1_client_method()&#187;.\n<li class=\"l\"> Az elavult ERR_get_state(), ERR_remove_state() \u00e9s ERR_remove_thread_state() funkci\u00f3k elt\u00e1vol\u00edt\u00e1sra ker\u00fcltek.\n<li class=\"l\"> A darwin-i386{,-cc} \u00e9s darwin-ppc{,64}{,-cc} c\u00e9lplatformok t\u00e1mogat\u00e1sa megsz\u0171nt.  <\/ul>\n<p>Forr\u00e1s: <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65208\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. OpenSSL 4.0 \u043e\u0442\u043d\u0435\u0441\u0451\u043d \u043a \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u043c \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 \u0432\u0435\u0442\u043e\u043a OpenSSL 3.6, 3.5 LTS, 3.4 \u0438 3.0 LTS \u043f\u0440\u043e\u0434\u043b\u0438\u0442\u0441\u044f \u0434\u043e \u043d\u043e\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430, \u0430\u043f\u0440\u0435\u043b\u044f 2030 \u0433\u043e\u0434\u0430, \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430 \u0438 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-168753","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-14T21:12:07+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-04-14T21:12:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Az OpenSSL 4.0.0 titkos\u00edt\u00f3 k\u00f6nyvt\u00e1r kiad\u00e1sa | ProHoster","description":"Megjelent az OpenSSL 4.0.0 k\u00f6nyvt\u00e1r, amely a TLS protokollok \u00e9s k\u00fcl\u00f6nb\u00f6z\u0151 titkos\u00edt\u00e1si algoritmusok megval\u00f3s\u00edt\u00e1s\u00e1t k\u00edn\u00e1lja.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0 | ProHoster","og:description":"\u0421\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 4.0.0, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-4-0-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-14T21:12:07+00:00","article:modified_time":"2026-04-14T21:12:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/168753","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=168753"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/168753\/revisions"}],"predecessor-version":[{"id":169172,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/168753\/revisions\/169172"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=168753"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=168753"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=168753"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}