Hacker News with Generative AI: OpenSSL

OpenSSL 3.1.2: FIPS 140-3 Validated (openssl-library.org)
The OpenSSL Corporation is pleased to announce that OpenSSL version 3.1.2 has achieved FIPS 140-3 validation, signifying its compliance with the rigorous cryptographic module security requirements set forth by the National Institute of Standards and Technology (NIST). This accomplishment marks a significant milestone in reinforcing trusted, standards-based encryption for organizations operating in regulated environments, including government agencies, healthcare institutions, and financial services.
Setting up a trusted, self-signed SSL/TLS certificate authority in Linux (previnder.com)
With OpenSSL, it’s pretty easy to generate a simple self-signed TLS certificate. Just run the following command:
If OpenSSL Were a GUI (smallstep.com)
If OpenSSL were a GUI
OpenSSL 3.3.2 Released (github.com/openssl)
OpenSSL bug exposed up to 255 bytes of client heap and existed since 2011 (jbp.io)
16 years of CVE-2008-0166 – Debian OpenSSL Bug (secvuln.info)
Why the OpenSSL punycode vulnerability was not detected by fuzz testing (2022) (blogspot.com)