OpenSSL 3.4 Released with Initial Attribute Certificate (RFC 5755) Support
Coming four and a half months after OpenSSL 3.3, the OpenSSL 3.4 release introduces new features like the ability to directly fetch composite signature algorithms like RSA-SHA2-256, including new API functions, FIPS indicators support in the FIPS provider, as well as the implementation of RFC 9579 (PBMAC1) in PKCS#12.
OpenSSL 3.4 also introduces an optional additional random seed source RNG JITTER using a statically linked jitterentropy library, new -not_before and -not_after options for explicit setting of start and end dates of certificates created with the req and x509 apps, and support for requesting CRL in CMP.