Update?

[Neustradamus]

Dear @winlibs team, @cmb69, @weltling, @pierrejoye,

Have you planned an update?

• https://github.com/openssl/openssl/releases

Thanks in advance.

[cmb69]

See also https://externals.io/message/125440.

Perhaps we should roll-out OpenSSL 3.4 for master, and see how that goes.

[Neustradamus]

1.1.1 is EOL, very not secure.

[cmb69]

The current branch is https://github.com/winlibs/openssl/tree/3.0.

[Neustradamus]

@cmb69: Better, please merge in master before 3.4.0.

[Jan-E]

OpenSSL 3.5 has been marked as LTS now and supported up until 2030-04-08.
https://openssl-library.org/policies/releasestrat/index.html
This might be a good time to update OpenSSL to 3.5

[Jan-E]

@cmb69 OpenSSL 3.5.2 has been released today. OpenSSL 3.5 is supported up until April 2030. Can we upgrade to Openssl 3.5, at least for PHP 8.5?

[cmb69]

IMHO we should (try to) upgrade to OpenSSL 3.5 for PHP 8.5.

@bukka, @nielsdos, @shivammathur, what do you think?

[Neustradamus]

Good news!

[nielsdos]

I think we should try to upgrade.

[shivammathur]

@cmb69

Looks like a good idea to me as well, I can try.

[Jan-E]

FWIW: I had to configure with no-asm to build OpenSSL 3.5.2.

What shall we do: upgrade OpenSSL for all current PHP 8.x versions, for all versions under VS17 (8.4, 8.5) or just for PHP 8.5?

[shivammathur]

It built without any issues in the CI workflow we have.
https://github.com/winlibs/winlib-builder/actions/runs/16757119955/job/47442568658

For now, I have only upgraded it for 8.5.

The only test failure I got was this one.
https://github.com/php/php-src/actions/runs/16759874946/job/47452088314#step:6:359

I just fixed the test-case here in php/php-src#19384 since the path C:\Program Files\Common Files\SSL\/openssl.cnf still works on Windows.
@cmb69 what do you think.

[cmb69]

Thank you! This looks good to me, and I also would upgrade for PHP 8.5 only for now. If there are no issues, and need be, we can still backport to older PHP versions.