Skip to content

[3.13] gh-158010: Update OpenSSL in binaries and CI from 3.0 to 3.5 - #158015

Open
zware wants to merge 9 commits into
python:3.13from
zware:openssl-35_3.13
Open

zware wants to merge 9 commits into
python:3.13from
zware:openssl-35_3.13

Conversation

@zware

@zware zware commented Sep 23, 2026 •

Copy link
Copy Markdown
Member

Includes updates to Modules/_ssl_data_31.h backported from 3.14's Modules/_ssl_data_35.h along with Windows, macOS, Android, and CI updates.

@zware
zware requested a review from sethmlarson as a code owner September 23, 2026 17:24
@zware

zware commented Sep 23, 2026

Copy link
Copy Markdown
Member Author

AFAICT, the failing CIFuzz tests are not related to the changes in this PR.

@mhsmith

mhsmith commented Sep 23, 2026

Copy link
Copy Markdown
Member

The Android update looks fine.

@ned-deily ned-deily left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The macOS changes LGTM, thanks!

@hugovk hugovk left a comment •

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

News files:

"Updated macOS installer to use OpenSSL 3.5.8."

Perhaps also mention the 3.0->3.5 bump?


The configure docs for building from source recommends 3.0, do we want to recommend 3.5 here to match?

* OpenSSL 1.1.1 is the minimum version and OpenSSL 3.0.18 is the recommended
minimum version for the :mod:`ssl` and :mod:`hashlib` extension modules.


AFAICT, the failing CIFuzz tests are not related to the changes in this PR.

Yep, unrelated, see #152211. Backporting #145429 would help.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants