OpenSSL Project Files

TLS/SSL and crypto library

This is an exact mirror of the OpenSSL Project project, hosted at https://github.com/openssl/openssl. SourceForge is not affiliated with OpenSSL Project.

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
openssl-3.0.21.tar.gz	2026-06-09	15.3 MB	5
openssl-3.0.21.tar.gz.asc	2026-06-09	833 Bytes	0
openssl-3.0.21.tar.gz.sha1	2026-06-09	64 Bytes	0
openssl-3.0.21.tar.gz.sha256	2026-06-09	88 Bytes	0
OpenSSL 3.0.21 source code.tar.gz	2026-06-09	15.5 MB	0
OpenSSL 3.0.21 source code.zip	2026-06-09	18.3 MB	0
README.md	2026-06-09	1.8 kB	0
Totals: 7 Items		49.0 MB	5

OpenSSL 3.0.21 is a security patch release. The most severe CVE fixed in this release is High.

This release incorporates the following bug fixes and mitigations:

Fixed heap use-after-free in PKCS7_verify(). (CVE-2026-45447)
Fixed CMS AuthEnvelopedData processing may accept forged messages. (CVE-2026-34182)
Fixed AES-OCB IV ignored on EVP_Cipher() path. (CVE-2026-45445)
Fixed possible heap buffer overflow in ASN.1 multibyte string conversion. (CVE-2026-7383)
Fixed out-of-bounds read in CMS password-based decryption. (CVE-2026-9076)
Fixed heap buffer over-read in ASN.1 content parsing. (CVE-2026-34180)
Fixed possible NULL dereference in password-dased CMS decryption. (CVE-2026-42766)
Fixed FFC-DH peer validation uses attacker-supplied q. (CVE-2026-42770)
Fixed incorrect tag processing for empty messages in AES-GCM-SIV and AES-SIV modes. (CVE-2026-45446)

Source: README.md, updated 2026-06-09

Other Useful Business Software

MongoDB Atlas runs apps anywhere Icon

MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.

Start Free

Ship Agents Faster Icon

Ship Agents Faster

Transform your applications and workflows into powerful agentic systems at global scale.

Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.

Get Started Free

Ship Agents Faster

Transform your applications and workflows into powerful agentic systems at global scale.

Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.

Get Started Free

Recommended Projects

wolfSSL
The wolfSSL embedded SSL library (formerly CyaSSL) is a lightweight, portable, C-language-based SSL/TLS library targeted at IoT, embedded, and RTOS environments primarily because of its size, speed, and feature set. It works seamlessly in desktop, enterprise, and cloud environments as well. wolfSSL supports industry standards up to the current TLS 1.2 and DTLS 1.2, is up to 20 times smaller than OpenSSL, offers a simple API, an OpenSSL compatibility layer, OCSP and CRL support, is backed by the robust wolfCrypt cryptography library, and much more. wolfSSL relies on the FIPS 140-2 validated wolfCrypt library for all cryptographic functionality. Visit http://wolfssl.com/wolfSSL/fips.html for more info!
Hermes FTP Server
Hermes FTP Server is a free, cross-platform FTP server adhering to RFC 959, RFC 2228, and RFC 2389. It is being developed in Java with a strong focus on security and extensibility.
FreeNFS
Network File System (NFS Versions 2.0 & 3.0) for Windows
OpenSSL
This project offers OpenSSL for Windows (static as well as shared). It supports: FIPS Object Module 1.2 and CAPI engine. It includes most of the features available on Linux. It works out of the box so no additional software is needed.
TurnServer
TurnServer is a implementation of Traversal Using Relay around NAT (TURN) protocol. This protocol allows a client to obtain IP addresses and ports from such a relay.