-
-
Notifications
You must be signed in to change notification settings - Fork 31.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
gh-103142: Update error codes, multissltests, and CI workflows for OpenSSL 1.1.1u, 3.0.9, and 3.1.1. #105129
Conversation
ned-deily
commented
May 31, 2023
•
edited by bedevere-bot
Loading
edited by bedevere-bot
- Issue: Update OpenSSL used in binary releases per CVE-2023-0464 #103142
There are PCbuild/ and .azure-pipelines/ references that also need updating (see my draft #105174 which I was just basing off of what I blindly did for the previous update in #101727). But lets go forward with your PR here just adding those bits. I don't think I ever looked at that make_ssl_data.py generated .h file of string/constant definitions. |
I've posted the binaries for Windows. They are codesigned, so have to be done by someone with release team access.
I thought there was an open issue/PR to replace this file? As we should have access to OpenSSL's copies of this data. Guess it isn't merged yet... |
I updated my PR #105174 to have the additional bits that this touched plus a tweak to the _ssl_data .h file regeneration. If CI and buildbots are happy with it, I'll merge mine and generate the backport PRs. |
Closed in favor of #105174 |
woo, thanks Ned! (we were both considering this, when I created my PR I hadn't yet looked to see if someone else had taken this on. No worries from my end about the duplicate work collision, it's good to have eyeballs on the issue). |