The master sources are maintained in our
git repository, which is
accessible over the network and cloned on GitHub,
at https://github.com/openssl/openssl.
Bugs and pull patches (issues and pull requests) should be
filed on the GitHub repo.
Please familiarize yourself with the
license.
The table below lists the latest releases for every branch.
(For an explanation of the numbering, see our
release strategy.)
All releases can be found at
/source/old.
A list of mirror sites can be found here.
Note: The latest stable version is the 1.1.1 series. This is
also our Long Term Support (LTS) version, supported until 11th September
2023. All older versions (including 1.1.0, 1.0.2, 1.0.0 and 0.9.8) are
now out of support and should not be used. Users of these older versions
are encouraged to upgrade to 1.1.1 as soon as possible. Extended support
for 1.0.2 to gain access to security fixes for that version is
available.
The OpenSSL FIPS Object Module 2.0 (FOM) is also available for
download. It is no longer receiving updates. It must be used in
conjunction with a FIPS capable version of OpenSSL (1.0.2 series). A
new FIPS module is currently in development.
OpenSSL 3.0 is the next major version of OpenSSL that is currently
in development and includes the new FIPS Object Module. A pre-release
version of this is available below. This is for testing only. It should
not be used in production. Information and notes about OpenSSL 3.0 are
available on the OpenSSL
Wiki
When building a release for the first time, please make sure
to look at the INSTALL file in the distribution along with any NOTES
file applicable to your platform. If you have problems, look at the FAQ,
which can be found online. If you
still need more help, then join the
openssl-users email list and
post a question there.
PGP keys for the signatures are available from the
OMC page.
Current members that sign releases include Richard Levitte and
Matt Caswell.
Each day we make a snapshot of each development branch.
They can be found at
https://www.openssl.org/source/snapshot/.
These daily snapshots of the source tree are provided for
convenience only and not even guaranteed to compile. Note that
keeping a git local repository and updating it every 24 hours
is equivalent and will often be faster and more efficient.
Legalities
Please remember that export/import and/or use of strong
cryptography software, providing cryptography hooks, or even just
communicating technical details about cryptography software is
illegal in some parts of the world. So when you import this
package to your country, re-distribute it from there or even
just email technical suggestions or even source patches to the
authors or other people you are strongly advised to pay close
attention to any laws or regulations which apply to
you. The authors of OpenSSL are not liable for any violations
you make here. So be careful, it is your responsibility.