| #
fe01e9b8
|
| 09-Jun-2026 |
Jim Jagielski <jimjag@gmail.com> |
Bump bundled OpenSSL 3.0.13 -> 3.0.20
Updates the bundled OpenSSL to the latest 3.0 LTS patch release, pulling
in all security fixes between 3.0.13 and 3.0.20. Stays within the 3.0 LTS
line for lowe
Bump bundled OpenSSL 3.0.13 -> 3.0.20
Updates the bundled OpenSSL to the latest 3.0 LTS patch release, pulling
in all security fixes between 3.0.13 and 3.0.20. Stays within the 3.0 LTS
line for lowest regression risk (no API/ABI changes).
Note: the 3.0 LTS branch reaches end-of-life on 2026-09-07; a follow-up
move to a newer LTS (e.g. 3.5) should be planned separately.
Changes:
- external_deps.lst: new tarball name, MD5, and download URL
(MD5 fabdcf86f3f54e27689253f85b738959, verified against upstream tarball).
- openssl/makefile.mk: OPENSSL_NAME and TARFILE_MD5.
- openssl/openssl.patch: rebased the Windows compatibility guards
(_WIN32_WINNT version checks in init.c / threads_win.c and the
IPPROTO_IPV6 fallback in bio_sock2.c) onto 3.0.20 sources; context had
shifted so the original hunks no longer applied.
- openssl/opensslunx.patch: bumped the embedded version path to 3.0.20.
Verified: declared MD5 matches the upstream tarball, and both the Unix
(opensslunx.patch) and Windows (openssl.patch) patch sets apply cleanly
to the 3.0.20 source tree via the build's "cd misc && patch -p2" step.
Platform compile/link/runtime still to be confirmed by CI.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
show more ...
|
| #
8eb9a7e6
|
| 07-Apr-2024 |
Damjan Jovanovic <damjan@apache.org> |
Build OpenSSL as a dynamic link library, instead of a static library.
Patch its users to use an RPATH of $ORIGIN, so they use the correct copy.
This reduces the size of the build by about 4615 KiB, o
Build OpenSSL as a dynamic link library, instead of a static library.
Patch its users to use an RPATH of $ORIGIN, so they use the correct copy.
This reduces the size of the build by about 4615 KiB, or 3.78%.
Patch by: me
show more ...
|
| #
4c5b548f
|
| 18-Mar-2024 |
Damjan Jovanovic <damjan@apache.org> |
Upgrade OpenSSL to version 3.0.13.
LICENSE and NOTICE files now reflect its new license.
The obsolete "DISABLE_OPENSSL" setting has been removed.
Patch Python 2 to support OpenSSL 3.0.x.
Support old
Upgrade OpenSSL to version 3.0.13.
LICENSE and NOTICE files now reflect its new license.
The obsolete "DISABLE_OPENSSL" setting has been removed.
Patch Python 2 to support OpenSSL 3.0.x.
Support old versions of Windows.
Uses Strawberry Perl on Windows to build, fetched as a dependency.
Workarounds for missing integer limit constants in the old version of MSVC we use.
NASM now works when it's in the PATH, instead of needing --with-nasm-path to ./configure.
Patch by: me
show more ...
|