https://github.com/python/cpython/commit/84d46019be7c6779d486464e1817b8f16adbfb0b
commit: 84d46019be7c6779d486464e1817b8f16adbfb0b
branch: main
author: Zachary Ware <[email protected]>
committer: hugovk <[email protected]>
date: 2026-09-29T14:58:55Z
summary:
gh-158010: Update CI to use latest OpenSSL and AWS-LC releases (#158412)
files:
M .github/workflows/build.yml
M .github/workflows/reusable-san.yml
M .github/workflows/reusable-ubuntu.yml
M Tools/ssl/multissltests.py
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b9fbc8524550453..90686b83d4a6369 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -268,13 +268,12 @@ jobs:
# unsupported as it most resembles other 1.1.1-work-a-like ssl APIs
# supported by important vendors such as AWS-LC.
- { name: openssl, version: 1.1.1w }
- - { name: openssl, version: 3.0.22 }
- - { name: openssl, version: 3.4.7 }
- - { name: openssl, version: 3.5.8 }
- - { name: openssl, version: 3.6.4 }
- - { name: openssl, version: 4.0.2 }
+ - { name: openssl, version: 3.4.8 }
+ - { name: openssl, version: 3.5.9 }
+ - { name: openssl, version: 3.6.5 }
+ - { name: openssl, version: 4.0.3 }
## AWS-LC
- - { name: aws-lc, version: 5.5.0 }
+ - { name: aws-lc, version: 5.10.0 }
env:
SSLLIB_VER: ${{ matrix.ssllib.version }}
MULTISSL_DIR: ${{ github.workspace }}/multissl
@@ -379,7 +378,7 @@ jobs:
needs: build-context
if: needs.build-context.outputs.run-ubuntu == 'true'
env:
- OPENSSL_VER: 3.5.8
+ OPENSSL_VER: 3.5.9
PYTHONSTRICTEXTENSIONBUILD: 1
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -493,7 +492,7 @@ jobs:
matrix:
os: [ubuntu-26.04]
env:
- OPENSSL_VER: 3.5.8
+ OPENSSL_VER: 3.5.9
PYTHONSTRICTEXTENSIONBUILD: 1
ASAN_OPTIONS: detect_leaks=0:allocator_may_return_null=1:handle_segv=0
steps:
diff --git a/.github/workflows/reusable-san.yml
b/.github/workflows/reusable-san.yml
index 7eb3ee919d2892c..6b4a43b259638e2 100644
--- a/.github/workflows/reusable-san.yml
+++ b/.github/workflows/reusable-san.yml
@@ -17,7 +17,7 @@ permissions:
env:
FORCE_COLOR: 1
- OPENSSL_VER: 3.5.8
+ OPENSSL_VER: 3.5.9
jobs:
build-san-reusable:
diff --git a/.github/workflows/reusable-ubuntu.yml
b/.github/workflows/reusable-ubuntu.yml
index ba12e82218d1a53..1b10078b8409f4f 100644
--- a/.github/workflows/reusable-ubuntu.yml
+++ b/.github/workflows/reusable-ubuntu.yml
@@ -35,7 +35,7 @@ jobs:
runs-on: ${{ inputs.os }}
timeout-minutes: 60
env:
- OPENSSL_VER: 3.5.8
+ OPENSSL_VER: 3.5.9
PYTHONSTRICTEXTENSIONBUILD: 1
TERM: linux
steps:
diff --git a/Tools/ssl/multissltests.py b/Tools/ssl/multissltests.py
index 037f1852180b621..8f01246150bd340 100755
--- a/Tools/ssl/multissltests.py
+++ b/Tools/ssl/multissltests.py
@@ -44,17 +44,17 @@
OPENSSL_OLD_VERSIONS = [
"1.1.1w",
+ "3.0.22",
"3.1.8",
"3.2.6",
"3.3.7",
]
OPENSSL_RECENT_VERSIONS = [
- "3.0.22",
- "3.4.7",
- "3.5.8",
- "3.6.4",
- "4.0.2",
+ "3.4.8",
+ "3.5.9",
+ "3.6.5",
+ "4.0.3",
# See make_ssl_data.py for notes on adding a new version.
]
@@ -65,7 +65,7 @@
]
AWSLC_RECENT_VERSIONS = [
- "5.5.0",
+ "5.10.0",
]
# store files in ../multissl
_______________________________________________
Python-checkins mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3//lists/python-checkins.python.org
Member address: [email protected]
