Back in early October, I told you to go test the OpenSSL 4.1 betas. The lab work is over. OpenSSL 4.1.0 is final, downloadable, and — this is the part that matters to anyone running production servers — it stays API- and ABI-compatible with the 4.0 line. That means most of you can upgrade without recompiling a single application. In a project whose last major release broke APIs and sent half the internet scrambling, boring is a feature.

What's actually new

The headline is DTLS 1.3 (RFC 9147). OpenSSL has done DTLS 1.0 and 1.2 for years, but 1.3 was nowhere to be found — and if you run anything that encrypts UDP traffic, you've been waiting for this. Video calls, VoIP, VPN tunnels, IoT fleets, game servers: all of it gets the TLS 1.3-style handshake — faster round trips, modern cipher suites, forward secrecy — over unreliable datagrams. Post-quantum key exchange rides along over UDP too.

Two smaller protocol additions matter for operators. GREASE (RFC 8701) lets you inject reserved values into cipher suites and extensions via SSL_OP_GREASE (plus a new -grease flag on s_client), which keeps middleboxes from ossifying on whatever values they happen to recognize today. And the IKEv2 Key Derivation Function joins the library, which is genuinely nice news if you run IKEv2-based VPN setups alongside your WireGuard fleet.

Then there's the math. Post-quantum algorithms finally get the optimization treatment they deserve: faster Number Theoretic Transform operations for ML-DSA and ML-KEM on PPC64LE, faster ML-DSA on x86-64, AVX-512-optimized SHAKE x4 under the hood of ML-DSA, and AVX-512 plus VAES acceleration for AES-CBC decryption on x86-64. Nothing about what the algorithms do changes. It's about cost — and cost is exactly what decides whether post-quantum key exchange can live in production before quantum computers live anywhere.

The upgrade is the story

OpenSSL 4.0 was the one that hurt: broken API, big feature dump (LMS signatures, SM2/SM3/SM4, Encrypted Client Hello, hybrid X25519MLKEM768). The 4.1 line is the payoff for absorbing that pain. Since 4.1 is ABI-compatible with 4.0, this release should be a library swap plus a service restart, not a rebuild-the-world weekend. The project's own download table lists 4.1.0 with an end-of-life of November 2027, so this branch has legs.

That said, three things deserve your attention before you move:

1. The release notes document four known DTLS issues. DTLS is the newest and least battle-tested corner of this release. If your stack touches UDP encryption — WebRTC gateways, DTLS-based VPN, anything with a UDP socket and a handshake — test it in staging against your actual traffic patterns, not just s_server hello-world.

2. tsget grew a new dependency. The Timestamping utility switched from the abandoned WWW::Curl::Easy Perl module to Net::Curl::Easy. If you have timestamping scripts in cron, make sure the new module is installed before you upgrade or your first Monday-morning failure will be a confused Perl error.

3. Some dead weight got dropped. Build targets for Windows CE and Windows-on-Itanium are gone, and the no-ecdsa/no-ecdh configure options are removed because they never actually disabled the implementations they named. If you were relying on those flags to trim the build, switch to no-ec.

The playbook

Here's the boring, reliable way to do this:

  1. Grab openssl-4.1.0.tar.gz from openssl-library.org, verify the PGP signature and SHA256 sum against the official checksums — the site publishes both next to every tarball.
  2. Build in your usual staging pipeline and roll it to one non-critical box first.
  3. Confirm with openssl version and a quick s_client/s_server DTLS handshake test against your real clients.
  4. Watch the logs for a day. Then roll the rest.

DTLS 1.3 took years to reach OpenSSL. The upgrade itself shouldn't take you longer than a coffee break — as long as you verify first.

Sources

  • OpenSSL Library downloads (official release table): openssl-library.org — OpenSSL 4.1.0 released 23 Oct 2026, EOL Nov 2027
  • OpenSSL 4.1.0 release coverage: linuxiac.com, runtimewire.com
  • OpenSSL 4.1.0-alpha1 announcement details (DTLS 1.3, GREASE, post-quantum optimizations): linuxcompatible.org