On 12/09/18 19:24, Chris Outwin wrote: > I’m an OpenSSL newbie and this is my first post. I’m using OpenSSL for receipt validation in an iOS application. > > Is there a list of checksums to verify openssl download versions? Next to each download on the website there are links for SHA256/PGP/SHA1 checksums. https://www.openssl.org/source/ > I believe I should be using openssl-1.0.2p. Can openssl-1.1.1 be used in a production application yet? Yes. The final version was released earlier this week. > Why doesn’t openssl-1.1.1 end with a letter of the alphabet? 1.1.1 is the first production release of the 1.1.1 series. The next time we issue a bug and/or security fix version it will be 1.1.1a. The one after that 1.1.1b, and so on. Matt -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
