AmiSSL Bumps Up to Version 5.7

AmiSSL 5.7 is an Amiga-packed SSL package of OpenSSL 3.0.8! Version 5.7 of AmiSSL comes with updated root certificates and some improvements.

The changes for the AmiSSL 5.7 Release

• Updated OpenSSL backend to full compatibility with the latest OpenSSL 3.0.8 (7.2.2023) version, which includes one high, seven moderate and one low severity fixes for newly identified vulnerabilities:
  • Fixed NULL dereference during PKCS7 data verification.
  • Fixed X.400 address type confusion in X.509 GeneralName.
  • Fixed NULL dereference validating DSA public key.
  • Fixed Invalid pointer dereference in d2i_PKCS7 functions.
  • Fixed Use-after-free following BIO_new_NDEF.
  • Fixed Double free after calling PEM_read_bio_ex.
  • Fixed Timing Oracle in RSA Decryption.
  • Fixed X.509 Name Constraints Read Buffer Overflow.
  • Fixed X.509 Policy Constraints Double Locking security issue.
• Updated root certificates to the latest Mozilla-based bundle provided by https://curl.se/docs/caextract.html dated 10.1.2023.
• Correctly clear thread locks before using InitSemaphore() on OS3.
• Prevent OS4 load time emulation from corrupting the data in the PPC ASM optimized routines by moving data from .text section to .rodata.
• Removed redundant code in PPC ASM optimized routines.
• Removed unused PPC POWER8 specific ASM optimized routines.

AmiSSL Backward Compatibility

All applications compiled to use previous versions of AmiSSL v5 will automatically use this latest version once installed. Old applications will continue to use AmiSSL v4 or older and will need to be recompiled with the updated SDK in order to start using AmiSSL v5. Besides this difference, AmiSSL v5 can be installed on top of any previous AmiSSL versions, which ensures that applications compiled for AmiSSL v1/v2/v3/v4 continue to work.

GitHub AmiSSL Page

Also do remember that the clock of the Amiga must be set to today for SSL to work as it should. If you don’t have a clock, you can get the time by setting it from an NTP server.

Example to put in the end of Startup-Sequence or User-Startup settings files that you find in the S folder of Workbench:
rentp -o120 0.fedora.pool.ntp.org

AmiSSL 5.7 is out for Classic AmigaOS with 3.0 or higher + AmigaOS 4 on GitHub and Aminet. Happy surfing and using Amiga online!

Downloads Related To This Article

NTP Sync Tools For AmigaOS

AmiSSL Package