| fe01e9b8 | 09-Jun-2026 |
Jim Jagielski <jimjag@gmail.com> |
Bump bundled OpenSSL 3.0.13 -> 3.0.20
Updates the bundled OpenSSL to the latest 3.0 LTS patch release, pulling in all security fixes between 3.0.13 and 3.0.20. Stays within the 3.0 LTS line for lowe
Bump bundled OpenSSL 3.0.13 -> 3.0.20
Updates the bundled OpenSSL to the latest 3.0 LTS patch release, pulling in all security fixes between 3.0.13 and 3.0.20. Stays within the 3.0 LTS line for lowest regression risk (no API/ABI changes).
Note: the 3.0 LTS branch reaches end-of-life on 2026-09-07; a follow-up move to a newer LTS (e.g. 3.5) should be planned separately.
Changes: - external_deps.lst: new tarball name, MD5, and download URL (MD5 fabdcf86f3f54e27689253f85b738959, verified against upstream tarball). - openssl/makefile.mk: OPENSSL_NAME and TARFILE_MD5. - openssl/openssl.patch: rebased the Windows compatibility guards (_WIN32_WINNT version checks in init.c / threads_win.c and the IPPROTO_IPV6 fallback in bio_sock2.c) onto 3.0.20 sources; context had shifted so the original hunks no longer applied. - openssl/opensslunx.patch: bumped the embedded version path to 3.0.20.
Verified: declared MD5 matches the upstream tarball, and both the Unix (opensslunx.patch) and Windows (openssl.patch) patch sets apply cleanly to the 3.0.20 source tree via the build's "cd misc && patch -p2" step. Platform compile/link/runtime still to be confirmed by CI.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
show more ...
|