[openssl/openssl] 60c15b: Remove support for SSLv3

[Andrew Dinh]

Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: 60c15b2aff152a64523cf3904a4f8d19ee8aceee
https://github.com/openssl/openssl/commit/60c15b2aff152a64523cf3904a4f8d19ee8aceee
Author: Kurt Roeckx <ku...@roeckx.be>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M .github/workflows/ci.yml
M .github/workflows/coveralls.yml
M .github/workflows/fips-checksums.yml
M .github/workflows/fuzz-checker.yml
M .github/workflows/os-zoo.yml
M .github/workflows/prov-compat-label.yml
M .github/workflows/provider-compatibility.yml
M .github/workflows/run-checker-daily.yml
M .github/workflows/static-analysis-on-prem.yml
M .github/workflows/static-analysis.yml
M .github/workflows/windows.yml
M CHANGES.md
M Configure
M apps/ciphers.c
M apps/include/opt.h
M apps/lib/s_cb.c
M apps/list.c
M apps/s_client.c
M apps/s_server.c
M apps/s_time.c
M doc/man1/openssl-ciphers.pod.in
M doc/man1/openssl-s_client.pod.in
M doc/man1/openssl-s_time.pod.in
M doc/man1/openssl-sess_id.pod.in
M doc/man1/openssl.pod
M doc/man3/SSL_CONF_cmd.pod
M doc/man3/SSL_CTX_new.pod
M doc/perlvars.pm
M ssl/build.info
M ssl/methods.c
M ssl/record/methods/build.info
M ssl/record/methods/recmethod_local.h
R ssl/record/methods/ssl3_meth.c
M ssl/record/methods/tls_common.c
M ssl/s3_enc.c
M ssl/s3_lib.c
M ssl/s3_msg.c
M ssl/ssl_lib.c
M ssl/ssl_local.h
M ssl/ssl_sess.c
M ssl/statem/extensions.c
M ssl/statem/extensions_clnt.c
M ssl/statem/statem_clnt.c
M ssl/statem/statem_lib.c
M ssl/statem/statem_srvr.c
M ssl/t1_trce.c
M test/README.ssltest.md
M test/helpers/ssl_test_ctx.c
M test/recipes/70-test_asyncio.t
M test/recipes/70-test_clienthello.t
M test/recipes/70-test_recordlen.t
M test/recipes/70-test_renegotiation.t
M test/recipes/70-test_servername.t
M test/recipes/70-test_sslsessiontick.t
M test/recipes/70-test_sslsignature.t
M test/recipes/70-test_sslvertol.t
M test/recipes/80-test_ssl_new.t
M test/recipes/80-test_ssl_old.t
M test/recipes/90-test_fatalerr.t
M test/recipes/90-test_sslapi.t
M test/ssl-tests/02-protocol-version.cnf
M test/ssl-tests/04-client_auth.cnf.in
M test/ssl-tests/protocol_version.pm
M test/ssl_ctx_test.c
M test/ssl_old_test.c
M test/sslapitest.c

Log Message:
-----------
Remove support for SSLv3

Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Commit: 4574e1b3cb20e95cfad9a72d2fac3ac8ed2d2a14
https://github.com/openssl/openssl/commit/4574e1b3cb20e95cfad9a72d2fac3ac8ed2d2a14
Author: Andrew Dinh <and...@openssl.org>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M crypto/err/openssl.txt
M crypto/rsa/rsa_err.c
M crypto/ssl_err.c
M include/openssl/rsaerr.h
M include/openssl/ssl.h.in
M include/openssl/sslerr.h
M ssl/ssl_ciph.c

Log Message:
-----------
Remove unused SSLv3 specific error codes

Also remove the SSL_TXT_SSLV3 name.

Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Commit: 21fc75e49fa0864f47a9898094206107574e6178
https://github.com/openssl/openssl/commit/21fc75e49fa0864f47a9898094206107574e6178
Author: Andrew Dinh <and...@openssl.org>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M ssl/statem/statem_clnt.c
M ssl/statem/statem_srvr.c

Log Message:
-----------
Address SSLv3 removal nits

Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Commit: b3d26e438a6a0d879bb0383de866a0474238cd61
https://github.com/openssl/openssl/commit/b3d26e438a6a0d879bb0383de866a0474238cd61
Author: Andrew Dinh <and...@openssl.org>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M crypto/err/openssl.ec
M crypto/err/openssl.txt
M crypto/ssl_err.c
M include/openssl/sslerr.h
M include/openssl/sslerr_legacy.h
M ssl/s3_lib.c
M ssl/statem/extensions_clnt.c
M ssl/statem/extensions_srvr.c
M ssl/statem/statem_clnt.c
M ssl/t1_lib.c

Log Message:
-----------
Rename SSL3 error codes to TLS equivalents

Updated error code names and references from SSL3 to TLS in error definitions and error strings. Legacy error codes are preserved in sslerr_legacy.h for backward compatibility

Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Commit: 8c108ae03b5302aa525322a51fb9f526099f1d55
https://github.com/openssl/openssl/commit/8c108ae03b5302aa525322a51fb9f526099f1d55
Author: Andrew Dinh <and...@openssl.org>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M Configure

Log Message:
-----------
Deprecate SSL3 Configure flags

Show a deprecated warning if users attempt to run Configure script with
no-ssl3, no-ssl, or no-ssl3-method. Also adds a fix to the Configure
script preventing users from enabling deprecated flags.

Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Commit: 357beec47f331c0e07c2e965f7ac11e507a77b19
https://github.com/openssl/openssl/commit/357beec47f331c0e07c2e965f7ac11e507a77b19
Author: Andrew Dinh <and...@openssl.org>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M Configure

Log Message:
-----------
Allow enabling deprecated flags that haven't been removed yet

Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Commit: 8d623d4979f0e218242bdca5aeca01fd1abd6bf8
https://github.com/openssl/openssl/commit/8d623d4979f0e218242bdca5aeca01fd1abd6bf8
Author: Andrew Dinh <and...@openssl.org>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M INSTALL.md
M NOTES-NONSTOP.md
M fuzz/README.md
M test/README.ssltest.md

Log Message:
-----------
Update documentation using enable-ssl3 Configure flags

Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Commit: 0b271780eaecfa99d5eac17a9430cbf17aa0b78f
https://github.com/openssl/openssl/commit/0b271780eaecfa99d5eac17a9430cbf17aa0b78f
Author: Andrew Dinh <and...@openssl.org>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M .github/workflows/ci.yml
M .github/workflows/os-zoo.yml

Log Message:
-----------
Remove sslv3 flags from x86 CI jobs

Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Commit: b53d8bf16807690979c6eb59b2a7c05e24901810
https://github.com/openssl/openssl/commit/b53d8bf16807690979c6eb59b2a7c05e24901810
Author: Andrew Dinh <and...@openssl.org>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M CHANGES.md

Log Message:
-----------
Add entry to CHANGES.md

Explain the changes to configure

Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Commit: 6821363f28148b8ff6fedde0fcac6271f17e8e6e
https://github.com/openssl/openssl/commit/6821363f28148b8ff6fedde0fcac6271f17e8e6e
Author: Andrew Dinh <and...@openssl.org>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M apps/include/opt.h
M doc/man1/openssl.pod
M doc/perlvars.pm

Log Message:
-----------
Add no-ssl3 back as a no-op

Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Commit: a11b5ae0d2481d5ab4d6275dcef0ec08131360c6
https://github.com/openssl/openssl/commit/a11b5ae0d2481d5ab4d6275dcef0ec08131360c6
Author: Andrew Dinh <and...@openssl.org>
Date: 2025-12-23 (Tue, 23 Dec 2025)

Changed paths:
M doc/man3/SSL_CONF_cmd.pod

Log Message:
-----------
SSL3 documentation nits

Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29338)


Compare: https://github.com/openssl/openssl/compare/fc756e594ed5...a11b5ae0d248

To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications