Science & Tech · Cybersecurity · 1 hr ago
OpenSSL 4.1.0 adds DTLS 1.3 support but includes four known bugs
OpenSSL released version 4.1.0, a new update to software used to secure internet communications.
The release adds support for DTLS 1.3, a version of the security protocol designed for datagram connections such as those using UDP.
But the project lists four known bugs in its DTLS code, which may affect developers using DTLS 1.3 or OpenSSL’s new DTLS listener support.
Two bugs can cause programs to misread connection errors, potentially leaving them waiting on a failed connection or closing one that could still work.
Another can interrupt a DTLS 1.3 handshake after packet loss, while a fourth can prevent a lost session-resumption ticket from being sent again.
A fix is in progress for the ticket bug, but the project gives no fix status for the other three.
The update also includes performance improvements and changes that may affect existing setups, including a new Perl module requirement for the tsget utility.
OpenSSL released version 4.1.0 with support for DTLS 1.3 and four known bugs in its DTLS code.
Two bugs can cause applications to misread connection errors, while another can abort a server handshake and the fourth can prevent a lost session ticket from being retransmitted.
A fix is in progress for the ticket retransmission bug, but no fix status is listed for the other three.
The release also removes two ineffective build options and drops Windows-on-Itanium and Windows CE build targets.
- Who
- The OpenSSL project.
- What
- Released OpenSSL 4.1.0, adding DTLS 1.3 support and listing four known bugs in the DTLS code.
- When
- 2026-10-25, the article’s publication date.
- Where
- Not stated.
- Why
- The release adds DTLS 1.3 support and includes other changes and optimizations. The sources do not state a specific reason for the release.
This story does not have two clearly opposing sides.
This story does not have a timeline yet.
- Release
- OpenSSL 4.1.0
- New protocol support
- DTLS 1.3, defined in RFC 9147
- Known DTLS bugs
- 4
- Fix in progress
- KeyUpdate-related retransmission bug
- Removed build options
- no-ecdsa and no-ecdh
What people are saying
no-ec