OpenSSL 3.5 LTS to 2030: where 3.0 users land

The OpenSSL release strategy lists versions 3.0, 1.1.1 and 1.0.2 as no longer supported. Extended support for them is available through a support contract. The downloads page says every version not listed there is out of support and should not be used in production.

Series	End of life
4.1	2027-11-23
4.0	2027-05-14
3.5 LTS	2030-04-08

The schedule: a new release every six months, in April and October, and an LTS every two years, supported for at least 5 years. Starting with 5.0 in October 2027, a major release comes every two years.

Example

Illustrative. A service on 3.0. Moving to 3.5 LTS keeps the same MAJOR number, where the project guarantees API/ABI compatibility. Moving to 4.1 crosses a MAJOR and ends about 2 years and 4 months earlier.

Important

Your distribution may backport fixes to its own package. Run openssl version, then read the distribution's policy before you decide.

Decide per service

• ☐ Run openssl version in each image
• ☐ Check static builds too
• ☐ Check the distribution's support policy
• ☐ Score 3.5 LTS against 4.x

Weighted decision matrix — score the options →

Source: openssl-library.org, Release Strategy; Downloads.