Hi, Clearly the email announce has been sent *before* the files are made available and the web page linking to it (https://www.openssl.org/source/), updated. I'm not sure there is any rationale in doing so. Hopefully, it probably is only a matter of minutes... It might be useful to do it the other way in the future. -- Olivier Mascia > Le 7 févr. 2023 à 16:40, OpenSSL <openssl@xxxxxxxxxxx> a écrit : > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > > OpenSSL version 3.0.8 released > ============================== > > OpenSSL - The Open Source toolkit for SSL/TLS > https://www.openssl.org/ > > The OpenSSL project team is pleased to announce the release of > version 3.0.8 of our open source toolkit for SSL/TLS. > For details of the changes, see the release notes at: > > https://www.openssl.org/news/openssl-3.0-notes.html > > Specific notes on upgrading to OpenSSL 3.0 from previous versions are > available in the OpenSSL Migration Guide, here: > > https://www.openssl.org/docs/man3.0/man7/migration_guide.html > > OpenSSL 3.0.8 is available for download via HTTPS and FTP from the > following master locations (you can find the various FTP mirrors under > https://www.openssl.org/source/mirror.html): > > * https://www.openssl.org/source/ > * ftp://ftp.openssl.org/source/ > > The distribution file name is: > > o openssl-3.0.8.tar.gz > Size: 15151328 > SHA1 checksum: 580d8a7232327fe1fa6e7db54ac060d4321f40ab > SHA256 checksum: 6c13d2bf38fdf31eac3ce2a347073673f5d63263398f1f69d0df4a41253e4b3e > > The checksums were calculated using the following commands: > > openssl sha1 openssl-3.0.8.tar.gz > openssl sha256 openssl-3.0.8.tar.gz > > Yours, > > The OpenSSL Project Team. > > -----BEGIN PGP SIGNATURE----- > > iQIzBAEBCgAdFiEEeVOsH7w9yLOykjk+1enkP3357owFAmPiVZsACgkQ1enkP335 > 7oxOdg/7Bjd9g7GOn/pmpoClDtnJWhTjnjZdR0SP6EFVR3Sa84xXYq5hMgIP/Dnb > XsVba1MkQddfFSjNrn+4zuPD96yJSsXwfR52PFsbRQcDc21/UEus+pCy6Vbr5YjA > weI8yHoyreDq8BOdu/SLlBeQ2ZO9mIjdzT4mFL6sPzyGAKfTI2QIcebstGJVjmJ4 > TYSnkqUCKHLZBgth3EJEbmvUoaE+gHE36lvQH+XwEB2cKeE2hebr1L4TJvaE/ZO+ > FVU/G7JJ7h3YcwUGkezDG2y+HuD3Dhthnd3k5IeV60tAOsZQtodS24ME4R2GYJiz > YDU7LxzNSs1padUFM8BX08+VWsIZU6+p1Jb4S9OgpaoZOc/Ra7hwXSYbjQueZIlS > rxMI0lnSUow3tCcyVpsc9yL86dKGEjhPevZ1lQBFLA3WjfX85qp6Y4BQR8Qz4fdA > bDuH2wYXXbWQXjudGtGBZy1iLNXg44XqjcOLWyWsAn1khqCttAA+M9/w+Du65q3U > empfBDWFyYDjCEZ6vIkfGdBm5IJ/F8Phe5erWQRIYz5HkV2B4yuM8qvHuKnOIubP > Yq9BznicZRlSaqpZrBe3t/SJrCvsS8Ct6Sn/LoA+5K5gkivznHkbcTT5n4qA2sVR > zI27KCGk8ywwe5QiZn4DoYGVpfbN1q9YALjbxqMNLGYpkfpk+Pk= > =sUZQ > -----END PGP SIGNATURE-----
