OpenSSL Project Files

TLS/SSL and crypto library

This is an exact mirror of the OpenSSL Project project, hosted at https://github.com/openssl/openssl. SourceForge is not affiliated with OpenSSL Project.

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
openssl-3.4.8.tar.gz	< 23 hours ago	18.4 MB	0
openssl-3.4.8.tar.gz.asc	< 23 hours ago	931 Bytes	0
openssl-3.4.8.tar.gz.sha1	< 23 hours ago	63 Bytes	0
openssl-3.4.8.tar.gz.sha256	< 23 hours ago	87 Bytes	0
OpenSSL 3.4.8 source code.tar.gz	< 24 hours ago	18.6 MB	0
OpenSSL 3.4.8 source code.zip	< 24 hours ago	21.9 MB	0
README.md	< 24 hours ago	2.4 kB	0
Totals: 7 Items		58.9 MB	0

OpenSSL 3.4.8 is a security patch release. The most severe CVE fixed in this release is High.

This release incorporates the following bug fixes and mitigations:

Fixed DTLS retransmissions of handshake messages from a stale buffer offset. (CVE-2026-84782)
Fixed excessive memory allocation in relative CRLDP processing. (CVE-2026-35189)
Fixed potential CPU DoS via O(n^2) fragment reassembly in QUIC. (CVE-2026-42772)
Fixed a timing side-channel in scalar multiplication for mon-NIST EC curves. (CVE-2026-54872)
Fixed QUIC STREAM fragment metadata DoS. (CVE-2026-54873)
Fixed non-constant-time SM2 scalar multiplication on ARM64 and RISC-V. (CVE-2026-54875)
Fixed out-of-bounds access after SSL_set_SSL_CTX() during a handshake. (CVE-2026-72897)
Fixed QUIC connection-level flow control was not enforced for streams. (CVE-2026-75804)
Fixed a NULL pointer dereference in CMP client revocation response handling. (CVE-2026-75805)
Fixed an unauthenticated and undersized DTLS 1.2 AEAD record causing DoS. (CVE-2026-75806)
Fixed a timing side-channel in SM2 signature generation. (CVE-2026-77696)
Fixed an unbounded RETIRE_CONNECTION_ID backlog in QUIC stack implementation. (CVE-2026-84784)

Source: README.md, updated 2026-09-29

Other Useful Business Software

$300 Free Credits to Build on Google Cloud Icon

$300 Free Credits to Build on Google Cloud

New customers can spin up VMs, build with AI, and query data at no cost.

Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.

Start Free

One Monitoring Tool for IT, OT and Cloud | Free Trial Icon

One Monitoring Tool for IT, OT and Cloud | Free Trial

Vendor-agnostic monitoring across on-prem servers, cloud platforms and OT devices, all in one dashboard. No more tool sprawl.

Modern infrastructure spans data centers, cloud platforms and factory floors, and every blind spot between them is a risk. PRTG supports SNMP, WMI, SSH and other standard protocols to monitor IT, OT and hybrid environments through one customizable dashboard. Build the views your team needs, from network health to application performance, without switching tools. Try PRTG free for 30 days now.

Try PRTG Free

$300 Free Credits to Build on Google Cloud

New customers can spin up VMs, build with AI, and query data at no cost.

Put your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.

Start Free

Recommended Projects

wolfSSL
The wolfSSL embedded SSL library (formerly CyaSSL) is a lightweight, portable, C-language-based SSL/TLS library targeted at IoT, embedded, and RTOS environments primarily because of its size, speed, and feature set. It works seamlessly in desktop, enterprise, and cloud environments as well. wolfSSL supports industry standards up to the current TLS 1.2 and DTLS 1.2, is up to 20 times smaller than OpenSSL, offers a simple API, an OpenSSL compatibility layer, OCSP and CRL support, is backed by the robust wolfCrypt cryptography library, and much more. wolfSSL relies on the FIPS 140-2 validated wolfCrypt library for all cryptographic functionality. Visit http://wolfssl.com/wolfSSL/fips.html for more info!
SimplePKI
A Public Key Cryptographic system based on OpenSSL and MySQL.
Hermes FTP Server
Hermes FTP Server is a free, cross-platform FTP server adhering to RFC 959, RFC 2228, and RFC 2389. It is being developed in Java with a strong focus on security and extensibility.
FreeNFS
Network File System (NFS Versions 2.0 & 3.0) for Windows
OpenSSL
This project offers OpenSSL for Windows (static as well as shared). It supports: FIPS Object Module 1.2 and CAPI engine. It includes most of the features available on Linux. It works out of the box so no additional software is needed.