AmiSSL 4.9 Now Available
 

https://upload.wikimedia.org/wikiped...L_logo.svg.png

The AmiSSL project is a collaborative effort to develop a shared library for Amiga-based systems (AmigaOS, MorphOS, AROS, etc.) based on the OpenSSL cryptographic library toolkit. The library together with its provided software development kit (SDK) tries to be 100% API/ABI compatible to the OpenSSL version it is based on. In addition, due to its shared library nature it can be used by several Amiga applications at the same time. Many applications already make use of AmiSSL - the shared library concept saves memory and allows developers to easily integrate a modern, stable, optimised SSL/TLS and cryptographic solution into their applications with minimum effort. With regular AmiSSL updates, applications and users additionally benefit from OpenSSL upgrades and security fixes, without authors needing to update their own code.

AmiSSL 4.9 is available for download from https://github.com/jens-maus/amissl/releases/4.9 (or via AmiUpdate) and contains the following modifications:

• Updated OpenSSL backend to full compatibility to latest OpenSSL 1.1.1k (25.03.2021) version, which brings security and bug fixes.
• Simplified and improved logic in amisslmaster.library for choosing which libraries to open.
• Installer will now delete redundant AmiSSLv4 libraries where possible.
• Added Swedish installer translation.
• Updated icons with more modern GlowIcons.
• Added sample openssl.cnf file and CA.pl helper script to the installation.
• Added CA.pl documentation to OpenSSL.doc.

Its great

I use curl-7.74.0.lha from Aminet and it works with AmiSSL 4.9. I have to specify -k flag each time though to disable verification. Any idea of why that is?

Try adding "--capath AmiSSL:Certs" to your curl command line. Or "setenv save SSL_CERT_DIR AmiSSL:Certs" instead without having to change your curl command line. It is probably an issue of the curl port and you should contact the author for the best solution.

I'm guessing they should really be calling SSL_CTX_set_default_verify_paths() when the user sets nothing, as they are using AmiSSL.

Nice release, thanx.

Thanks a lot! :)