Skip to content

deps: update OpenSSL to 3.5.8 #65542

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
nodejs-github-bot wants to merge 3 commits into
base: main
Choose a base branch
from
Open

deps: update OpenSSL to 3.5.8 #65542

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
4dbd976
deps: upgrade openssl sources to openssl-3.5.8
nodejs-github-bot Aug 25, 2026
d7a38d0
deps: update archs files for openssl-3.5.8
nodejs-github-bot Aug 25, 2026
7e2254f
test: account for varied OpenSSL CCM final behaviours
panva Aug 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
36 changes: 32 additions & 4 deletions deps/openssl/config/archs/BSD-x86/asm/configdata.pm
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -171,7 +171,7 @@ our %config = (
],
"dynamic_engines" => "0",
"ex_libs" => [],
"full_version" => "3.5.7",
"full_version" => "3.5.8",
"includes" => [],
"lflags" => [],
"lib_defines" => [
Expand Down Expand Up @@ -230,7 +230,7 @@ our %config = (
"openssl_sys_defines" => [],
"openssldir" => "",
"options" => "enable-ssl-trace enable-fips enable-zlib --with-zlib-include=../../zlib enable-brotli --with-brotli-include=../../brotli/c/include enable-zstd --with-zstd-include=../../zstd/lib no-afalgeng no-asan no-brotli-dynamic no-buildtest-c++ no-crypto-mdebug no-crypto-mdebug-backtrace no-demos no-dynamic-engine no-ec_nistp_64_gcc_128 no-egd no-external-tests no-fips-jitter no-fuzz-afl no-fuzz-libfuzzer no-h3demo no-hqinterop no-jitter no-ktls no-loadereng no-md2 no-msan no-pie no-rc5 no-sctp no-shared no-ssl3 no-ssl3-method no-sslkeylog no-tests no-tfo no-trace no-ubsan no-unit-test no-uplink no-weak-ssl-ciphers no-winstore no-zlib-dynamic no-zstd-dynamic",
"patch" => "7",
"patch" => "8",
"perl_archname" => "x86_64-linux-gnu-thread-multi",
"perl_cmd" => "/usr/bin/perl",
"perl_version" => "5.34.0",
Expand Down Expand Up @@ -289,11 +289,11 @@ our %config = (
"prerelease" => "",
"processor" => "",
"rc4_int" => "unsigned int",
"release_date" => "9 Jun 2026",
"release_date" => "25 Aug 2026",
"shlib_version" => "3",
"sourcedir" => ".",
"target" => "BSD-x86",
"version" => "3.5.7"
"version" => "3.5.8"
);
our %target = (
"AR" => "ar",
Expand Down Expand Up @@ -2255,6 +2255,9 @@ our %unified_info = (
"doc/html/man3/MDC2_Init.html" => [
"doc/man3/MDC2_Init.pod"
],
"doc/html/man3/NAME_CONSTRAINTS_check.html" => [
"doc/man3/NAME_CONSTRAINTS_check.pod"
],
"doc/html/man3/NCONF_new_ex.html" => [
"doc/man3/NCONF_new_ex.pod"
],
Expand Down Expand Up @@ -2291,6 +2294,9 @@ our %unified_info = (
"doc/html/man3/OPENSSL_LH_stats.html" => [
"doc/man3/OPENSSL_LH_stats.pod"
],
"doc/html/man3/OPENSSL_armcap.html" => [
"doc/man3/OPENSSL_armcap.pod"
],
"doc/html/man3/OPENSSL_config.html" => [
"doc/man3/OPENSSL_config.pod"
],
Expand Down Expand Up @@ -4949,6 +4955,9 @@ our %unified_info = (
"doc/man/man3/MDC2_Init.3" => [
"doc/man3/MDC2_Init.pod"
],
"doc/man/man3/NAME_CONSTRAINTS_check.3" => [
"doc/man3/NAME_CONSTRAINTS_check.pod"
],
"doc/man/man3/NCONF_new_ex.3" => [
"doc/man3/NCONF_new_ex.pod"
],
Expand Down Expand Up @@ -4985,6 +4994,9 @@ our %unified_info = (
"doc/man/man3/OPENSSL_LH_stats.3" => [
"doc/man3/OPENSSL_LH_stats.pod"
],
"doc/man/man3/OPENSSL_armcap.3" => [
"doc/man3/OPENSSL_armcap.pod"
],
"doc/man/man3/OPENSSL_config.3" => [
"doc/man3/OPENSSL_config.pod"
],
Expand Down Expand Up @@ -11310,6 +11322,9 @@ our %unified_info = (
"doc/html/man3/MDC2_Init.html" => [
"doc/man3/MDC2_Init.pod"
],
"doc/html/man3/NAME_CONSTRAINTS_check.html" => [
"doc/man3/NAME_CONSTRAINTS_check.pod"
],
"doc/html/man3/NCONF_new_ex.html" => [
"doc/man3/NCONF_new_ex.pod"
],
Expand Down Expand Up @@ -11346,6 +11361,9 @@ our %unified_info = (
"doc/html/man3/OPENSSL_LH_stats.html" => [
"doc/man3/OPENSSL_LH_stats.pod"
],
"doc/html/man3/OPENSSL_armcap.html" => [
"doc/man3/OPENSSL_armcap.pod"
],
"doc/html/man3/OPENSSL_config.html" => [
"doc/man3/OPENSSL_config.pod"
],
Expand Down Expand Up @@ -14004,6 +14022,9 @@ our %unified_info = (
"doc/man/man3/MDC2_Init.3" => [
"doc/man3/MDC2_Init.pod"
],
"doc/man/man3/NAME_CONSTRAINTS_check.3" => [
"doc/man3/NAME_CONSTRAINTS_check.pod"
],
"doc/man/man3/NCONF_new_ex.3" => [
"doc/man3/NCONF_new_ex.pod"
],
Expand Down Expand Up @@ -14040,6 +14061,9 @@ our %unified_info = (
"doc/man/man3/OPENSSL_LH_stats.3" => [
"doc/man3/OPENSSL_LH_stats.pod"
],
"doc/man/man3/OPENSSL_armcap.3" => [
"doc/man3/OPENSSL_armcap.pod"
],
"doc/man/man3/OPENSSL_config.3" => [
"doc/man3/OPENSSL_config.pod"
],
Expand Down Expand Up @@ -16437,6 +16461,7 @@ our %unified_info = (
"doc/html/man3/HMAC.html",
"doc/html/man3/MD5.html",
"doc/html/man3/MDC2_Init.html",
"doc/html/man3/NAME_CONSTRAINTS_check.html",
"doc/html/man3/NCONF_new_ex.html",
"doc/html/man3/OBJ_nid2obj.html",
"doc/html/man3/OCSP_REQUEST_new.html",
Expand All @@ -16449,6 +16474,7 @@ our %unified_info = (
"doc/html/man3/OPENSSL_FILE.html",
"doc/html/man3/OPENSSL_LH_COMPFUNC.html",
"doc/html/man3/OPENSSL_LH_stats.html",
"doc/html/man3/OPENSSL_armcap.html",
"doc/html/man3/OPENSSL_config.html",
"doc/html/man3/OPENSSL_fork_prepare.html",
"doc/html/man3/OPENSSL_gmtime.html",
Expand Down Expand Up @@ -18560,6 +18586,7 @@ our %unified_info = (
"doc/man/man3/HMAC.3",
"doc/man/man3/MD5.3",
"doc/man/man3/MDC2_Init.3",
"doc/man/man3/NAME_CONSTRAINTS_check.3",
"doc/man/man3/NCONF_new_ex.3",
"doc/man/man3/OBJ_nid2obj.3",
"doc/man/man3/OCSP_REQUEST_new.3",
Expand All @@ -18572,6 +18599,7 @@ our %unified_info = (
"doc/man/man3/OPENSSL_FILE.3",
"doc/man/man3/OPENSSL_LH_COMPFUNC.3",
"doc/man/man3/OPENSSL_LH_stats.3",
"doc/man/man3/OPENSSL_armcap.3",
"doc/man/man3/OPENSSL_config.3",
"doc/man/man3/OPENSSL_fork_prepare.3",
"doc/man/man3/OPENSSL_gmtime.3",
Expand Down
2 changes: 1 addition & 1 deletion deps/openssl/config/archs/BSD-x86/asm/crypto/buildinf.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
*/

#define PLATFORM "platform: BSD-x86"
#define DATE "built on: Wed Jun 17 17:24:13 2026 UTC"
#define DATE "built on: Tue Aug 25 12:44:29 2026 UTC"

/*
* Generate compiler_flags as an array of individual characters. This is a
Expand Down
10 changes: 5 additions & 5 deletions deps/openssl/config/archs/BSD-x86/asm/include/openssl/opensslv.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ extern "C" {
# define OPENSSL_VERSION_MINOR 5
/* clang-format on */
/* clang-format off */
# define OPENSSL_VERSION_PATCH 7
# define OPENSSL_VERSION_PATCH 8
/* clang-format on */

/*
Expand Down Expand Up @@ -87,10 +87,10 @@ extern "C" {
* OPENSSL_VERSION_BUILD_METADATA_STR appended.
*/
/* clang-format off */
# define OPENSSL_VERSION_STR "3.5.7"
# define OPENSSL_VERSION_STR "3.5.8"
/* clang-format on */
/* clang-format off */
# define OPENSSL_FULL_VERSION_STR "3.5.7"
# define OPENSSL_FULL_VERSION_STR "3.5.8"
/* clang-format on */

/*
Expand All @@ -99,15 +99,15 @@ extern "C" {
* These strings are defined separately to allow them to be parsable.
*/
/* clang-format off */
# define OPENSSL_RELEASE_DATE "9 Jun 2026"
# define OPENSSL_RELEASE_DATE "25 Aug 2026"
/* clang-format on */

/*
* SECTION 4: BACKWARD COMPATIBILITY
*/

/* clang-format off */
# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.7 9 Jun 2026"
# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.8 25 Aug 2026"
/* clang-format on */

/* clang-format off */
Expand Down
19 changes: 12 additions & 7 deletions deps/openssl/config/archs/BSD-x86/asm/include/openssl/ssl.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2488,6 +2488,7 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
#define SSL_VALUE_STREAM_WRITE_BUF_SIZE 7
#define SSL_VALUE_STREAM_WRITE_BUF_USED 8
#define SSL_VALUE_STREAM_WRITE_BUF_AVAIL 9
#define SSL_VALUE_QUIC_MAX_PENDING_CONNS 16

#define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT 0
#define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT 1
Expand Down Expand Up @@ -2735,8 +2736,18 @@ const CTLOG_STORE *SSL_CTX_get0_ctlog_store(const SSL_CTX *ctx);
#define SSL_SECOP_OTHER_SIGALG (5 << 16)
#define SSL_SECOP_OTHER_CERT (6 << 16)

/* Indicated operation refers to peer key or certificate */
/*
* Unused values - these do nothing and are never set.
* They are retained because of API. They should
* be removed next major
*/
#define SSL_SECOP_PEER 0x1000
/* Peer EE key in certificate */
#define SSL_SECOP_PEER_EE_KEY (SSL_SECOP_EE_KEY | SSL_SECOP_PEER)
/* Peer CA key in certificate */
#define SSL_SECOP_PEER_CA_KEY (SSL_SECOP_CA_KEY | SSL_SECOP_PEER)
/* Peer CA digest algorithm in certificate */
#define SSL_SECOP_PEER_CA_MD (SSL_SECOP_CA_MD | SSL_SECOP_PEER)

/* Values for "op" parameter in security callback */

Expand Down Expand Up @@ -2775,12 +2786,6 @@ const CTLOG_STORE *SSL_CTX_get0_ctlog_store(const SSL_CTX *ctx);
#define SSL_SECOP_CA_KEY (17 | SSL_SECOP_OTHER_CERT)
/* CA digest algorithm in certificate */
#define SSL_SECOP_CA_MD (18 | SSL_SECOP_OTHER_CERT)
/* Peer EE key in certificate */
#define SSL_SECOP_PEER_EE_KEY (SSL_SECOP_EE_KEY | SSL_SECOP_PEER)
/* Peer CA key in certificate */
#define SSL_SECOP_PEER_CA_KEY (SSL_SECOP_CA_KEY | SSL_SECOP_PEER)
/* Peer CA digest algorithm in certificate */
#define SSL_SECOP_PEER_CA_MD (SSL_SECOP_CA_MD | SSL_SECOP_PEER)

void SSL_set_security_level(SSL *s, int level);
__owur int SSL_get_security_level(const SSL *s);
Expand Down
36 changes: 32 additions & 4 deletions deps/openssl/config/archs/BSD-x86/asm_avx2/configdata.pm
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -171,7 +171,7 @@ our %config = (
],
"dynamic_engines" => "0",
"ex_libs" => [],
"full_version" => "3.5.7",
"full_version" => "3.5.8",
"includes" => [],
"lflags" => [],
"lib_defines" => [
Expand Down Expand Up @@ -230,7 +230,7 @@ our %config = (
"openssl_sys_defines" => [],
"openssldir" => "",
"options" => "enable-ssl-trace enable-fips enable-zlib --with-zlib-include=../../zlib enable-brotli --with-brotli-include=../../brotli/c/include enable-zstd --with-zstd-include=../../zstd/lib no-afalgeng no-asan no-brotli-dynamic no-buildtest-c++ no-crypto-mdebug no-crypto-mdebug-backtrace no-demos no-dynamic-engine no-ec_nistp_64_gcc_128 no-egd no-external-tests no-fips-jitter no-fuzz-afl no-fuzz-libfuzzer no-h3demo no-hqinterop no-jitter no-ktls no-loadereng no-md2 no-msan no-pie no-rc5 no-sctp no-shared no-ssl3 no-ssl3-method no-sslkeylog no-tests no-tfo no-trace no-ubsan no-unit-test no-uplink no-weak-ssl-ciphers no-winstore no-zlib-dynamic no-zstd-dynamic",
"patch" => "7",
"patch" => "8",
"perl_archname" => "x86_64-linux-gnu-thread-multi",
"perl_cmd" => "/usr/bin/perl",
"perl_version" => "5.34.0",
Expand Down Expand Up @@ -289,11 +289,11 @@ our %config = (
"prerelease" => "",
"processor" => "",
"rc4_int" => "unsigned int",
"release_date" => "9 Jun 2026",
"release_date" => "25 Aug 2026",
"shlib_version" => "3",
"sourcedir" => ".",
"target" => "BSD-x86",
"version" => "3.5.7"
"version" => "3.5.8"
);
our %target = (
"AR" => "ar",
Expand Down Expand Up @@ -2255,6 +2255,9 @@ our %unified_info = (
"doc/html/man3/MDC2_Init.html" => [
"doc/man3/MDC2_Init.pod"
],
"doc/html/man3/NAME_CONSTRAINTS_check.html" => [
"doc/man3/NAME_CONSTRAINTS_check.pod"
],
"doc/html/man3/NCONF_new_ex.html" => [
"doc/man3/NCONF_new_ex.pod"
],
Expand Down Expand Up @@ -2291,6 +2294,9 @@ our %unified_info = (
"doc/html/man3/OPENSSL_LH_stats.html" => [
"doc/man3/OPENSSL_LH_stats.pod"
],
"doc/html/man3/OPENSSL_armcap.html" => [
"doc/man3/OPENSSL_armcap.pod"
],
"doc/html/man3/OPENSSL_config.html" => [
"doc/man3/OPENSSL_config.pod"
],
Expand Down Expand Up @@ -4949,6 +4955,9 @@ our %unified_info = (
"doc/man/man3/MDC2_Init.3" => [
"doc/man3/MDC2_Init.pod"
],
"doc/man/man3/NAME_CONSTRAINTS_check.3" => [
"doc/man3/NAME_CONSTRAINTS_check.pod"
],
"doc/man/man3/NCONF_new_ex.3" => [
"doc/man3/NCONF_new_ex.pod"
],
Expand Down Expand Up @@ -4985,6 +4994,9 @@ our %unified_info = (
"doc/man/man3/OPENSSL_LH_stats.3" => [
"doc/man3/OPENSSL_LH_stats.pod"
],
"doc/man/man3/OPENSSL_armcap.3" => [
"doc/man3/OPENSSL_armcap.pod"
],
"doc/man/man3/OPENSSL_config.3" => [
"doc/man3/OPENSSL_config.pod"
],
Expand Down Expand Up @@ -11310,6 +11322,9 @@ our %unified_info = (
"doc/html/man3/MDC2_Init.html" => [
"doc/man3/MDC2_Init.pod"
],
"doc/html/man3/NAME_CONSTRAINTS_check.html" => [
"doc/man3/NAME_CONSTRAINTS_check.pod"
],
"doc/html/man3/NCONF_new_ex.html" => [
"doc/man3/NCONF_new_ex.pod"
],
Expand Down Expand Up @@ -11346,6 +11361,9 @@ our %unified_info = (
"doc/html/man3/OPENSSL_LH_stats.html" => [
"doc/man3/OPENSSL_LH_stats.pod"
],
"doc/html/man3/OPENSSL_armcap.html" => [
"doc/man3/OPENSSL_armcap.pod"
],
"doc/html/man3/OPENSSL_config.html" => [
"doc/man3/OPENSSL_config.pod"
],
Expand Down Expand Up @@ -14004,6 +14022,9 @@ our %unified_info = (
"doc/man/man3/MDC2_Init.3" => [
"doc/man3/MDC2_Init.pod"
],
"doc/man/man3/NAME_CONSTRAINTS_check.3" => [
"doc/man3/NAME_CONSTRAINTS_check.pod"
],
"doc/man/man3/NCONF_new_ex.3" => [
"doc/man3/NCONF_new_ex.pod"
],
Expand Down Expand Up @@ -14040,6 +14061,9 @@ our %unified_info = (
"doc/man/man3/OPENSSL_LH_stats.3" => [
"doc/man3/OPENSSL_LH_stats.pod"
],
"doc/man/man3/OPENSSL_armcap.3" => [
"doc/man3/OPENSSL_armcap.pod"
],
"doc/man/man3/OPENSSL_config.3" => [
"doc/man3/OPENSSL_config.pod"
],
Expand Down Expand Up @@ -16437,6 +16461,7 @@ our %unified_info = (
"doc/html/man3/HMAC.html",
"doc/html/man3/MD5.html",
"doc/html/man3/MDC2_Init.html",
"doc/html/man3/NAME_CONSTRAINTS_check.html",
"doc/html/man3/NCONF_new_ex.html",
"doc/html/man3/OBJ_nid2obj.html",
"doc/html/man3/OCSP_REQUEST_new.html",
Expand All @@ -16449,6 +16474,7 @@ our %unified_info = (
"doc/html/man3/OPENSSL_FILE.html",
"doc/html/man3/OPENSSL_LH_COMPFUNC.html",
"doc/html/man3/OPENSSL_LH_stats.html",
"doc/html/man3/OPENSSL_armcap.html",
"doc/html/man3/OPENSSL_config.html",
"doc/html/man3/OPENSSL_fork_prepare.html",
"doc/html/man3/OPENSSL_gmtime.html",
Expand Down Expand Up @@ -18560,6 +18586,7 @@ our %unified_info = (
"doc/man/man3/HMAC.3",
"doc/man/man3/MD5.3",
"doc/man/man3/MDC2_Init.3",
"doc/man/man3/NAME_CONSTRAINTS_check.3",
"doc/man/man3/NCONF_new_ex.3",
"doc/man/man3/OBJ_nid2obj.3",
"doc/man/man3/OCSP_REQUEST_new.3",
Expand All @@ -18572,6 +18599,7 @@ our %unified_info = (
"doc/man/man3/OPENSSL_FILE.3",
"doc/man/man3/OPENSSL_LH_COMPFUNC.3",
"doc/man/man3/OPENSSL_LH_stats.3",
"doc/man/man3/OPENSSL_armcap.3",
"doc/man/man3/OPENSSL_config.3",
"doc/man/man3/OPENSSL_fork_prepare.3",
"doc/man/man3/OPENSSL_gmtime.3",
Expand Down
2 changes: 1 addition & 1 deletion deps/openssl/config/archs/BSD-x86/asm_avx2/crypto/buildinf.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
*/

#define PLATFORM "platform: BSD-x86"
#define DATE "built on: Wed Jun 17 17:24:28 2026 UTC"
#define DATE "built on: Tue Aug 25 12:44:44 2026 UTC"

/*
* Generate compiler_flags as an array of individual characters. This is a
Expand Down
Loading
Loading