Skip to content

Follow-ups to OpenSSL 3.6.3 bump: CPython - #391

Open
jhanca-robotecai wants to merge 2 commits into
o3de:mainfrom
RobotecAI:jh/update_openssl_dependency
Open

Follow-ups to OpenSSL 3.6.3 bump: CPython#391
jhanca-robotecai wants to merge 2 commits into
o3de:mainfrom
RobotecAI:jh/update_openssl_dependency

Conversation

@jhanca-robotecai

Copy link
Copy Markdown
Contributor

Follow-ups to OpenSSL 3.6.3 bump (#387)

Qt: remove unused script parameters (Linux/Linux-aarch64)

The OPENSSL_FOLDER_NAME argument in build-linux.sh was dead code, never referenced after assignment. Removed the dependency and the unused parameter; Windows's OpenSSL usage is untouched. The same for two other parameters.

Python: rebuild bundled OpenSSL to 3.6.3 (Linux/Linux-aarch64)

_ssl.cpython-310-x86_64-linux-gnu.so and _hashlib.cpython-310-x86_64-linux-gnu.so statically embed and export unhidden OpenSSL symbols: update the dependency from 1.1.1t to 3.6.3.

Windows and Mac Python are unaffected by this PR, both are stuck on CPython 3.10's own upstream-frozen OpenSSL 1.1.1u/1.1.1w.

Testing

  • Downloaded and inspected the actual published qt-*-linux/qt-*-windows and python-*-linux packages (ldd, nm -D, strings)
  • Local build/test not yet run for the Python rebuild: relying on CI

jhanca-robotecai and others added 2 commits July 24, 2026 13:53
Signed-off-by: Jan Hanca <jan.hanca@robotec.ai>
Re-pin python's Linux and Linux-aarch64 depends_on_packages to OpenSSL-3.6.3-rev1
Bump the package rev
Fix the OpenSSL license file reference (LICENSE -> LICENSE.txt, renamed in OpenSSL 3.x).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Signed-off-by: Jan Hanca <jan.hanca@robotec.ai>
@jhanca-robotecai
jhanca-robotecai force-pushed the jh/update_openssl_dependency branch from 7b541a2 to 6bd771a Compare July 24, 2026 12:01
@jhanca-robotecai

Copy link
Copy Markdown
Contributor Author

PR #387 (the OpenSSL bump) merged successfully, but its package promotion is still stuck, hence CI failure. I will manually run the CI again when ready.

@spham-amzn

Copy link
Copy Markdown
Contributor

@jhanca-robotecai There seems to be a problem deploying the OpenSSL to the dev environment. The build is no longer there, so we may need to do a revision bump to get another build of OpenSSL and then promote it as soon as the jobs finish building.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants