Skip to content

openssl: update from 3.0.10 to 3.5.9 - #2956

Open
ibc wants to merge 2 commits into
mesonbuild:masterfrom
ibc:openssl-3.5.9
Open

ibc wants to merge 2 commits into
mesonbuild:masterfrom
ibc:openssl-3.5.9

Conversation

@ibc

@ibc ibc commented Oct 8, 2026

Copy link
Copy Markdown
Contributor

Details

  • Update to OpenSSL 3.5.9, the current LTS, since the 3.0 branch reached end of life in September 2026.
  • Generate the configs with Node.js v22.23.3, which bundles OpenSSL 3.5 and still configures it with no-comp (from v24.21.0 Node enables zlib, brotli and zstd).
  • Update generate_gypi.pl.patch to the cleanup line in Node v22.23.3 (git clean -f $src_dir).
  • Add providers/fips/include to the include directories, as Node does, since OpenSSL 3.5 includes fips/fipsindicator.h from non-FIPS providers.
  • Tested building on macOS arm64 as a subproject.

- Update to OpenSSL 3.5.9, the current LTS, since the 3.0 branch reached end of life in September 2026.
- Generate the configs with Node.js v22.23.3, which bundles OpenSSL 3.5 and still configures it with `no-comp` (from v24.21.0 Node enables zlib, brotli and zstd).
- Update `generate_gypi.pl.patch` to the cleanup line in Node v22.23.3 (`git clean -f $src_dir`).
- Add `providers/fips/include` to the include directories, as Node does, since OpenSSL 3.5 includes `fips/fipsindicator.h` from non-FIPS providers.
- Tested building on macOS arm64 as a subproject.
@ibc ibc mentioned this pull request Oct 8, 2026
@ibc

ibc commented Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

Friendly ping @iccir @bgilbert

@ibc

ibc commented Oct 20, 2026

Copy link
Copy Markdown
Contributor Author

@stephanlachnit could you please review/approve this PR?

@stephanlachnit

Copy link
Copy Markdown
Collaborator

@stephanlachnit could you please review/approve this PR?

LGTM but I know nothing about openssl, so @bgilbert or @neheb should have a look

@ibc

ibc commented Oct 21, 2026

Copy link
Copy Markdown
Contributor Author

Just in case, I've tested this wrap within a Meson projects and everything looks good, builds and works fine.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants