3p: update OpenSSL 1.1.1 -> 3.x #392

New issue

Closed

opened 2026-10-04 14:10:16 +00:00 by sky_line · 1 comment

sky_line commented

2026-10-04 14:10:16 +00:00

Owner

Move OpenSSL from 1.1.1 to the 3.x series. No prebuilt package exists, so build our own (fork 3p-openssl), alongside curl.

EVP_bf_cbc (llblowfishcipher.cpp:65) needs the legacy provider; the class appears unused, so remove it or load the provider.
CRYPTO_num_locks/set_locking_callback (llcrashlogger.cpp:635-653) are no-ops since 1.1: remove them.
The X509 / sk_X509 code in llsechandler_basic.cpp is fine on 3.x.
Default TLS behaviour changes (security level, signature algorithms, minimum TLS version): test SL login and CDN, web media and any OpenSim grids we support.

Part of keeping third-party dependencies current; check Linux and Windows packages together, and update autobuild.xml with autobuild edit installable.

Move OpenSSL from 1.1.1 to the 3.x series. No prebuilt package exists, so build our own (fork 3p-openssl), alongside curl. - `EVP_bf_cbc` (`llblowfishcipher.cpp:65`) needs the legacy provider; the class appears unused, so remove it or load the provider. - `CRYPTO_num_locks`/`set_locking_callback` (`llcrashlogger.cpp:635-653`) are no-ops since 1.1: remove them. - The X509 / `sk_X509` code in `llsechandler_basic.cpp` is fine on 3.x. - Default TLS behaviour changes (security level, signature algorithms, minimum TLS version): test SL login and CDN, web media and any OpenSim grids we support. Part of keeping third-party dependencies current; check Linux and Windows packages together, and update `autobuild.xml` with `autobuild edit installable`.

sky_line added the

platform

label

2026-10-04 14:10:16 +00:00

sky_line referenced this issue

2026-10-06 11:45:53 +00:00

3p: update curl 7.54 -> current 8.x #391

sky_line referenced this issue

2026-10-06 12:18:09 +00:00

Epic: networking -- own the asset fetch path, modern curl + OpenSSL for everything else #484

sky_line referenced this issue from a commit

2026-10-06 14:14:05 +00:00