Re: [OE-core] [RFC v4 1/6] openssl: upgrade 3.5.7 -> 4.0.1

[Jaipaul Cheernam <jaipaul.cheernam@est.tech>]

On 2026-08-23 08:57, Khem Raj wrote:
> https://autobuilder.yoctoproject.org/valkyrie/api/v2/logs/8474313/raw_inline
  Tested bitbake world -k with OpenSSL 4.0.1 upgrade across
   meta-oe, meta-networking, meta-python, meta-perl, meta-multimedia,
   meta-xfce, meta-initramfs, meta-filesystems.

   22 recipes fixed — patches provided, all with upstream references.

   13 recipes still broken:

   ENGINE API removed (needs Provider API rewrite):

   - imx-cst — NXP proprietary, no public upstream
   - extract-cert — needs Provider API migration

   Dead/unmaintained upstream:

   - wvstreams/wvdial — archived 2018, dial-up modem dialer
   - ntp (classic) — EOL 2023, recommend chrony
   - loudmouth — last activity 2019

   No upstream fix available:

   - ldns — heavy deprecated API usage (issue #243 open since 2024)
   - unbound — upstream PR #1437 attempted, closed
   - softhsm — upstream PR #882 in progress
   - ipmiutil — no upstream fix found
   - synergy — TLS methods removed, repo archived
   - spdm-emu — depends on libspdm abstraction


   - mercurial — Python 3.14 + OpenSSL 4.0 reports TLS 1.2 as 
unavailable (upstream CPython limitation, only Python 3.15 officially 
supports OpenSSL 4.0)

https://bugzilla.redhat.com/show_bug.cgi?id=2494735

https://github.com/python/cpython/issues/152709


   3 upstream PRs submitted by us: ntopng (merged), thrift, snort3