Releases distribution changes

Apr 30, 2024

I’d like to give you a heads-up about some changes we’re making at OpenSSL. We’re simplifying how you can get our software, and that means we’re phasing out some older methods that don’t quite fit with the way the web works today.

We’re no longer using our old ftp, rsync, and git links for distributing OpenSSL. These were great in their day, but it’s time to move on to something better and safer. ftp://ftp.openssl.org and rsync://rsync.openssl.org are not available anymore. As of June 1, 2024, we’re also going to shut down https://ftp.openssl.org and git://git.openssl.org/openssl.git mirrors.

GitHub is becoming the main distributor of the OpenSSL releases. So here is the transition plan. The steps will be spaced in 2-week intervals to gather and respond to any eventual feedback:

• Starting from the next patch release the tarballs will be uploaded only to GitHub, the download link at openssl.org/source will redirect to the corresponding release at github.com.
• One frequently downloaded old release at openssl.org/source will redirect to the corresponding release at github.com.
• All remaining frequently downloaded releases at openssl.org/source will redirect to the corresponding releases at github.com.

Why change things? Well, here are a couple of straightforward reasons:

• Safety first: The web’s come a long way in terms of security, and sticking to HTTPS helps keep everyone safer.
• Keeping it simple: Fewer methods of distribution mean less clutter and confusion, letting us focus on making OpenSSL even better.
• Watching the budget: Streamlining things cuts costs, which means we can spend more on improving OpenSSL and supporting you all.

That being said, the main source of OpenSSL releases will be OpenSSL GitHub. OpenSSL Source will remain only for backward compatibility and will redirect to GitHub.

Thanks so much for sticking with us. These updates will help us keep improving and ensure you have the best and safest experience using OpenSSL.

Cheers!