When was TLS 1.2 support added to OpenSSL?

by

On the official changelog page you provided, under Changes between 1.0.0h and 1.0.1 [14 Mar 2012] you can see Initial TLS v1.2 support.

*) Add TLS v1.2 server support for client authentication.
[Steve Henson]

*) Add TLS v1.2 client side support for client authentication. Keep cache
of handshake records longer as we don’t know the hash algorithm to use
until after the certificate request message is received.
[Steve Henson]

*) Initial TLS v1.2 client support. Add a default signature algorithms
extension including all the algorithms we support. Parse new signature
format in client key exchange. Relax some ECC signing restrictions for
TLS v1.2 as indicated in RFC5246.
[Steve Henson]

*) Add server support for TLS v1.2 signature algorithms extension. Switch
to new signature format when needed using client digest preference.
All server ciphersuites should now work correctly in TLS v1.2. No client
support yet and no support for client certificates.
[Steve Henson]

*) Initial TLS v1.2 support. Add new SHA256 digest to ssl code, switch
to SHA256 for PRF when using TLS v1.2 and later. Add new SHA256 based
ciphersuites. At present only RSA key exchange ciphersuites work with
TLS v1.2. Add new option for TLS v1.2 replacing the old and obsolete
SSL_OP_PKCS1_CHECK flags with SSL_OP_NO_TLSv1_2. New TLSv1.2 methods
and version checking.
[Steve Henson]

*) Initial TLSv1.1 support. Since TLSv1.1 is very similar to TLS v1.0 only a few changes are required […]

TLS 1.2 support is from OpenSSL version 1.0.1.

OpenSSL 0.9.8x is lower than 1.0.1 so it does not support TLS 1.2

More Related Contents:

  1. How can I transform between the two styles of public key format, one “BEGIN RSA PUBLIC KEY”, the other is “BEGIN PUBLIC KEY”
  2. Differences between “BEGIN RSA PRIVATE KEY” and “BEGIN PRIVATE KEY”
  3. Converting pfx to pem using openssl
  4. CMake not able to find OpenSSL library
  5. Use RSA private key to generate public key? [closed]
  6. Converting PKCS#12 certificate into PEM using OpenSSL
  7. Difference between openSSL rsautl and dgst
  8. Verify a certificate chain using openssl verify
  9. Convert PEM traditional private key to PKCS8 private key
  10. Using OpenSSL what does “unable to write ‘random state'” mean?
  11. Multiple OpenSSL RSA signing methods produce different results
  12. How to extract public key using OpenSSL?
  13. OpenSSL Verify return code: 20 (unable to get local issuer certificate)
  14. How do I manage the error “OpenSSL v1.1.1 ssl_choose_client_version unsupported protocol”? [closed]
  15. Why is Apple Deprecating OpenSSL in MacOS 10.7 (Lion)? [closed]
  16. RSA: Get exponent and modulus given a public key
  17. Correct location of openssl.cnf file
  18. Programmatically Create X509 Certificate using OpenSSL
  19. How to generate an openSSL key using a passphrase from the command line?
  20. Convert pem key to ssh-rsa format
  21. How to save public key from a certificate in .pem format
  22. How to create public and private key with openssl?
  23. How to convert an ECDSA key to PEM format
  24. Unable to load Private Key. (PEM routines:PEM_read_bio:no start line:pem_lib.c:648:Expecting: ANY PRIVATE KEY) [closed]
  25. Creating a .p12 file
  26. How do I get Visual Studio Code to trust our self-signed proxy certificate?
  27. Cross Compile OpenSSH for ARM
  28. How to make browser trust localhost SSL certificate? [closed]
  29. Decrypting AES256 with node.js returns wrong final block length
  30. Serving multiple domains in one box with SNI

Leave a Comment