About

This is version 5.7 of the open-source based AmiSSL library for Amiga based operating systems. AmiSSL v5 is a new major release which has been updated with full compatibility with OpenSSL 3.0. This includes important security related fixes, a built-in HTTP(S) client and comes with new encryption ciphers which are required nowadays to connect to modern SSL-based services such as HTTPS and SSH.

Changes

• Updated OpenSSL backend to full compatibility with the latest OpenSSL 3.0.8 (7.2.2023) version, which includes one high, seven moderate and one low severity fixes for newly identified vulnerabilities:
  • Fixed NULL dereference during PKCS7 data verification. (CVE-2023-0401)
  • Fixed X.400 address type confusion in X.509 GeneralName. (CVE-2023-0286)
  • Fixed NULL dereference validating DSA public key. (CVE-2023-0217)
  • Fixed Invalid pointer dereference in d2i_PKCS7 functions. (CVE-2023-0216)
  • Fixed Use-after-free following BIO_new_NDEF. (CVE-2023-0215)
  • Fixed Double free after calling PEM_read_bio_ex. (CVE-2022-4450)
  • Fixed Timing Oracle in RSA Decryption. (CVE-2022-4304)
  • Fixed X.509 Name Constraints Read Buffer Overflow. (CVE-2022-4203)
  • Fixed X.509 Policy Constraints Double Locking security issue. (CVE-2022-3996)
• Updated root certificates to latest Mozilla-based bundle provided by https://curl.se/docs/caextract.html dated 10.1.2023.
• Correctly clear thread locks before using InitSemaphore() on OS3 (#70).
• Prevent OS4 load time emulation corrupting the data in the PPC ASM optimised routines by moving data from .text section to .rodata (#38).
• Removed redundant code in PPC ASM optimised routines.
• Removed unused PPC POWER8 specific ASM optimised routines.

For details on all changes, see the full commit log.

Backwards Compatibility

All applications compiled to use previous versions of AmiSSL v5 will automatically use this latest version once installed. Old applications will continue to use AmiSSL v4 or older and will need to be recompiled with the updated SDK in order to start using AmiSSL v5. Besides this difference, AmiSSL v5 can be installed on top of any previous AmiSSL versions, which ensures that applications compiled for AmiSSL v1/v2/v3/v4 continue to work.

Requirements

AmigaOS 4.0+/PPC, AmigaOS 3.0+/68020+ or MorphOS

IMPORTANT NOTE

This release comes with binaries for the AmigaOS4/PPC and AmigaOS3/m68k platform only. Unfortunately, due to lack of motivated developers we couldn't provide native binaries for the MorphOS/PPC or AROS (PPC, i386, x86_64) platform. If you are, however, interested in seeing AmiSSL v5 being ported to these other Amiga-based platforms, please try to find motivated and talented developers who join our team as maintainers for these alternative platforms. In addition, if you are a MorphOS or AROS developer yourself, feel free to send pull requests to see your platform supported in one of the next releases.

Download

Please find the necessary OS specific installation archives and the developer SDK attached to this release below. The SHA256 checksums for the archives are:

4f7522b8c0c7eca9c68fac825d969ba60ecac4f6a0f6762be3135ea269def6ab  AmiSSL-5.7-OS3.lha
53c457e0b3d244b1d4cac81c15b0f165745a3cbb55078082fc13da748cd914a6  AmiSSL-5.7-OS4.lha
9c3f1b3c0fcedb4b8fd36a662584f4e55d82632aee882ecf86d0f94e7a7388e2  AmiSSL-5.7-SDK.lha