python · picnixz · Apr 25, 2025 · Mar 18, 2025 · Mar 19, 2025 · Mar 20, 2025
@@ -272,7 +272,7 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-24.04]
-        openssl_ver: [3.0.15, 3.1.7, 3.2.3, 3.3.2, 3.4.0]
+        openssl_ver: [3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.1]
         # See Tools/ssl/make_ssl_data.py for notes on adding a new version
     env:
       OPENSSL_VER: ${{ matrix.openssl_ver }}
@@ -339,7 +339,7 @@ jobs:
     needs: build-context
     if: needs.build-context.outputs.run-tests == 'true'
     env:
-      OPENSSL_VER: 3.0.15
+      OPENSSL_VER: 3.0.16
       PYTHONSTRICTEXTENSIONBUILD: 1
     steps:
     - uses: actions/checkout@v4
@@ -458,7 +458,7 @@ jobs:
       matrix:
         os: [ubuntu-24.04]
     env:
-      OPENSSL_VER: 3.0.15
+      OPENSSL_VER: 3.0.16
       PYTHONSTRICTEXTENSIONBUILD: 1
       ASAN_OPTIONS: detect_leaks=0:allocator_may_return_null=1:handle_segv=0
     steps:

@@ -22,7 +22,7 @@ Features and minimum versions required to build CPython:
 
 * Support for threads.
 
-* OpenSSL 1.1.1 is the minimum version and OpenSSL 3.0.9 is the recommended
+* OpenSSL 1.1.1 is the minimum version and OpenSSL 3.0.16 is the recommended
   minimum version for the :mod:`ssl` and :mod:`hashlib` extension modules.
 
 * SQLite 3.15.2 for the :mod:`sqlite3` extension module.

diff --git a/Mac/BuildScript/build-installer.py b/Mac/BuildScript/build-installer.py
@@ -246,9 +246,9 @@ def library_recipes():
 
     result.extend([
           dict(
-              name="OpenSSL 3.0.15",
-              url="https://github.com/openssl/openssl/releases/download/openssl-3.0.15/openssl-3.0.15.tar.gz",
-              checksum='23c666d0edf20f14249b3d8f0368acaee9ab585b09e1de82107c66e1f3ec9533',
+              name="OpenSSL 3.0.16",
+              url="https://github.com/openssl/openssl/releases/download/openssl-3.0.16/openssl-3.0.16.tar.gz",
+              checksum='57e03c50feab5d31b152af2b764f10379aecd8ee92f16c985983ce4a99f7ef86',
               buildrecipe=build_universal_openssl,
               configure=None,
               install=None,

diff --git a/Misc/NEWS.d/next/Library/2025-03-23-11-33-09.gh-issue-131423.bQlcEb.rst b/Misc/NEWS.d/next/Library/2025-03-23-11-33-09.gh-issue-131423.bQlcEb.rst
@@ -0,0 +1,2 @@
+:mod:`ssl` can show descriptions for errors added in OpenSSL 3.4.1.
+Patch by Bénédikt Tran.
diff --git a/Misc/NEWS.d/next/Windows/2025-03-23-11-32-35.gh-issue-131423.lcSz9s.rst b/Misc/NEWS.d/next/Windows/2025-03-23-11-32-35.gh-issue-131423.lcSz9s.rst
@@ -0,0 +1,2 @@
+Update Windows installer to use OpenSSL 3.0.16.
+Patch by Bénédikt Tran.
diff --git a/Misc/NEWS.d/next/macOS/2025-03-23-11-32-09.gh-issue-131423.s1Lvli.rst b/Misc/NEWS.d/next/macOS/2025-03-23-11-32-09.gh-issue-131423.s1Lvli.rst
@@ -0,0 +1,2 @@
+Update macOS installer to use OpenSSL 3.0.16.
+Patch by Bénédikt Tran.
@@ -121,8 +121,10 @@ static void _PySSLFixErrno(void) {
 
 /* Include generated data (error codes) */
 /* See make_ssl_data.h for notes on adding a new version. */
-#if (OPENSSL_VERSION_NUMBER >= 0x30100000L)
+#if (OPENSSL_VERSION_NUMBER >= 0x30401000L)
 #include "_ssl_data_34.h"
+#elif (OPENSSL_VERSION_NUMBER >= 0x30100000L)
+#include "_ssl_data_340.h"
 #elif (OPENSSL_VERSION_NUMBER >= 0x30000000L)
 #include "_ssl_data_300.h"
 #elif (OPENSSL_VERSION_NUMBER >= 0x10101000L)
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
	:mod:`ssl` can show descriptions for errors added in OpenSSL 3.4.1.
		Patch by Bénédikt Tran.
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		Update Windows installer to use OpenSSL 3.0.16.
picnixz marked this conversation as resolved. Show resolved Hide resolved
		Patch by Bénédikt Tran.
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		Update macOS installer to use OpenSSL 3.0.16.
		Patch by Bénédikt Tran.