From 75624c31b421f0efab6ffc0f32a839c976a4fc74 Mon Sep 17 00:00:00 2001 From: Dimitri John Ledkov Date: Sat, 17 Oct 2026 13:18:22 +0100 Subject: [PATCH] eng/doc: Update docs to list OpenSSL 4 as supported Follow up to https://github.com/microsoft/go/pull/2540 to list OpenSSL 4 as supported in documentation. --- eng/doc/SupportedPlatforms.md | 1 + eng/doc/fips/README.md | 5 +++++ 2 files changed, 6 insertions(+) diff --git a/eng/doc/SupportedPlatforms.md b/eng/doc/SupportedPlatforms.md index 124334b5bf2..2d942400f50 100644 --- a/eng/doc/SupportedPlatforms.md +++ b/eng/doc/SupportedPlatforms.md @@ -29,6 +29,7 @@ The following OpenSSL versions are supported on Linux platforms: - OpenSSL 1.1.1 - OpenSSL 3.x (built-in providers, or SymCrypt provider v1.6.1+) +- OpenSSL 4.x (built-in providers, or SymCrypt provider v1.6.1+) ## Getting Help diff --git a/eng/doc/fips/README.md b/eng/doc/fips/README.md index 1aca7e11bc4..293bd207ed6 100644 --- a/eng/doc/fips/README.md +++ b/eng/doc/fips/README.md @@ -327,6 +327,7 @@ The `libcrypto` shared library file name varies among different platforms, so a - The base name is always `libcrypto.so.` - Well-known version strings are appended to the base name in this order: + - Since Go 1.28: `4` -> `3` -> `1.1` -> `11` -> `111`. - Since Go 1.25: `3` -> `1.1` -> `11` -> `111`. - Prior to Go 1.25: `3` -> `1.1` -> `11` -> `111` -> `1.0.2` -> `1.0.0`. - This may find multiple libraries installed on the machine, so to pick one: @@ -461,6 +462,10 @@ A program running in FIPS mode can claim it is using a FIPS-certified cryptograp This list of major changes is intended for quick reference and for access to historical information about versions that are no longer supported. The behavior of all in-support versions are documented in the sections above with notes for version-specific differences where necessary. +### Go 1.28 + +- The OpenSSL backend added support for version 4.x. The supported versions are now OpenSSL 1.1.0, 1.1.1, 3.x, and 4.x. + ### Go 1.27 (Aug 2026) - Support for `GODEBUG=fips140=only` has been added. It acts as `fips140=on`, but also panics if a non-FIPS-approved algorithm is used.