diff mbox series

[1/1] openssl: 3.4.2 -> 3.5.2

Message ID c33930b39db477506067200c5c4f19cec0079b95.1758250424.git.liezhi.yang@windriver.com
State New
Headers show
Series [1/1] openssl: 3.4.2 -> 3.5.2 | expand

Commit Message

Robert Yang Sept. 19, 2025, 2:55 a.m. UTC 
From: Robert Yang <liezhi.yang@windriver.com>

The benefit of OpenSSL 3.5 is that it is an LTS supported to 2030, which can
save the maintenance time in the long run.

* New features:
  - Support for PQC algorithms (ML-KEM, ML-DSA and SLH-DSA)
  - Support for server side QUIC (RFC 9000)
  - Support for 3rd party QUIC stacks including 0-RTT support
  - Support added for opaque symmetric key objects (EVP_SKEY)
  - A new configuration option no-tls-deprecated-ec to disable support for TLS
    groups deprecated in RFC8422
  - A new configuration option enable-fips-jitter to make the FIPS provider to
    use the JITTER seed source
  - Support for central key generation in CMP
  - Support for multiple TLS keyshares and improved TLS key establishment group
    configurability
  - API support for pipelining in provided cipher algorithms

  - The full list of changes since OpenSSL 3.4:
    https://github.com/openssl/openssl/blob/openssl-3.5/CHANGES.md#openssl-35

* Test info
$ bitbake world core-image-sato core-image-minimal

Works well

$ runqemu tmp/deploy/images/qemux86-64/core-image-sato-qemux86-64.rootfs.qemuboot.conf nographic kvm
$ ptest-runner openssl
All tests successful.
Files=341, Tests=4466, 206 wallclock secs (16.53 usr  1.34 sys + 582.73 cusr 109.85 csys = 710.45 CPU)
Result: PASS
DURATION: 206
END: /usr/lib/openssl/ptest
2025-09-18T10:17
STOP: ptest-runner
TOTAL: 1 FAIL: 0

All tests successful, the similar results to minimal image.

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
---
 .../openssl/{openssl_3.4.2.bb => openssl_3.5.2.bb}              | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-connectivity/openssl/{openssl_3.4.2.bb => openssl_3.5.2.bb} (99%)
diff mbox series

Patch

diff --git a/meta/recipes-connectivity/openssl/openssl_3.4.2.bb b/meta/recipes-connectivity/openssl/openssl_3.5.2.bb
similarity index 99%
rename from meta/recipes-connectivity/openssl/openssl_3.4.2.bb
rename to meta/recipes-connectivity/openssl/openssl_3.5.2.bb
index 2998e37e758..cd0d22e48ad 100644
--- a/meta/recipes-connectivity/openssl/openssl_3.4.2.bb
+++ b/meta/recipes-connectivity/openssl/openssl_3.5.2.bb
@@ -18,7 +18,7 @@  SRC_URI:append:class-nativesdk = " \
            file://environment.d-openssl.sh \
            "
 
-SRC_URI[sha256sum] = "17b02459fc28be415470cccaae7434f3496cac1306b86b52c83886580e82834c"
+SRC_URI[sha256sum] = "c53a47e5e441c930c3928cf7bf6fb00e5d129b630e0aa873b08258656e7345ec"
 
 inherit lib_package multilib_header multilib_script ptest perlnative manpages
 MULTILIB_SCRIPTS = "${PN}-bin:${bindir}/c_rehash"