Repository navigation
Update OpenSSL (April 2026) #149254
Description
Feature or enhancement
Proposal:
OpenSSL has updates for 3.6.2, 3.5.6, 3.4.5, 3.3.7, 3.0.20:
https://openssl-library.org/post/2026-04-07-release-announcement/
We should update the CI, release artifacts, and so on
See #144551 for the last round.
Has this already been discussed elsewhere?
This is a minor feature, which does not need previous discussion elsewhere
Links to previous discussion of this feature:
No response
Linked PRs
- gh-149254: Update macOS installer to use OpenSSL 3.5.6. #149262
- [3.14] gh-149254: Update macOS installer to use OpenSSL 3.0.20. #149263
- [3.13] gh-149254: Update macOS installer to use OpenSSL 3.0.20. (GH-149263) #149265
- gh-149254: Bump OpenSSL versions for iOS and Android. #149270
- [3.14] gh-149254: Bump OpenSSL versions for iOS and Android. #149272
- [3.13] gh-149254: Bump OpenSSL version for Android. #149273
- gh-149254: Update Windows builds to use OpenSSL 3.5.6 #149326
- [3.14] gh-149254: Update Windows builds to OpenSSL 3.0.20 #149327
- [3.14] gh-149254: Update Windows builds to OpenSSL 3.5.6 #149329
- gh-149254: Update CI to use latest OpenSSL versions #149330
- [3.13] gh-149254: Update Windows builds to OpenSSL 3.0.20 (GH-149327) #149331
- [3.14] gh-149254: Update CI to use latest OpenSSL versions (GH-149330) #149333
- [3.13] gh-149254: Update CI to use latest OpenSSL versions (GH-149330) #149336
- [3.14] gh-149254: Bump OpenSSL to 3.5.6 for mobile platforms. #149341
- [3.14] gh-149254: Update macOS installer to use OpenSSL 3.5.6. #149438
- [3.14] gh-149254: Update CI jobs to use OpenSSL 3.5 #149925
Activity
pythongh-149254: Update macOS installer to use OpenSSL 3.5.6.
pythongh-149254: Update macOS installer to use OpenSSL 3.0.20.
gh-149254: Update macOS installer to use OpenSSL 3.5.6. (#149262)
[3.14] gh-149254: Update macOS installer to use OpenSSL 3.0.20. (#149263
[3.13] gh-149254: Update macOS installer to use OpenSSL 3.0.20. (GH-1…
gh-149254: Bump OpenSSL versions for iOS and Android. (#149270)
[3.14] gh-149254: Bump OpenSSL versions for iOS and Android. (#149272)
8 remaining items
gh-149254: Update CI to use latest OpenSSL and AWS-LC versions (GH-14…
[3.13] gh-149254: Update Windows builds to OpenSSL 3.0.20 (GH-149331)
[3.14] pythongh-149254: Update CI to use latest OpenSSL versions (pyt…
[3.14] gh-149254: Update CI to use latest OpenSSL versions (GH-149333)
[3.13] gh-149254: Update CI to use latest OpenSSL versions (GH-149336)
zware commentedon May 3, 2026
I believe this is done with the exception of GH-149329, which will with Hugo's approval start the process to update
3.14to OpenSSL 3.5 after 3.14.5 final. Until then, 3.15 is on OpenSSL 3.5.6, 3.14 and 3.13 on 3.0.20, and all older versions no longer receiving binary releases.freakboy3742 commentedon May 4, 2026
@zware Is there a separate staging ticket for the Py3.14 -> OpenSSL 3.5 bump, or should we just associate PRs with this ticket in a similar draft form?
(EDIT: I guess the question "should there be a ..." rather than "is there a...")
freakboy3742 commentedon May 4, 2026
GH-149341 is the analog for GH-149329 for iOS andAndroid.
zware commentedon May 4, 2026
There currently is not one, but I would not object to moving my draft PR if one gets created.
[3.14] gh-149254: Update Windows builds to OpenSSL 3.5.6 (GH-149329)
[3.14] gh-149254: Update macOS installer to use OpenSSL 3.5.6. (GH-14…
[3.14] gh-149254: Bump OpenSSL to 3.5.6 for mobile platforms. (GH-149341
[3.14] gh-149254: Update CI jobs to use OpenSSL 3.5 (GH-149925)
zware commentedon May 16, 2026
3.14.6 binary releases will include OpenSSL 3.5, and with that I'm calling this issue complete :) Thanks Ned and Russell for updating macOS and mobile.