OpenSSL 4.1.0 released: DTLS 1.3, GREASE, and what breaks when you upgrade
OpenSSL 4.1.0 adds DTLS 1.3 and GREASE and drops the CN fallback in host-name checks. What breaks, how to test it, and which version to run.
#pki
Every article tagged #pki, across topics.
#pki articles
eMudhra's weak CA keys: why emSign ECC Root CA - G3 is distrusted, and how to replace affected certificates
eMudhra's CA keys were numbers below 256. Why that breaks P-384, what the emSign ECC G3 distrust breaks, and how to replace affected certificates.