From bcd44a110ec720d928886b27285fe6908a800735 Mon Sep 17 00:00:00 2001 From: securely1g Date: Tue, 3 Mar 2026 17:22:36 -0800 Subject: [PATCH] Upgrade SymCrypt to 103.10.0 and SymCrypt-OpenSSL to 1.9.4 - Update SymCrypt submodule from 103.8.0 (53be637) to 103.10.0 (b39181f) - Update SymCrypt-OpenSSL submodule from 1.7.0 (1bf988b) to 1.9.4 (9fd0228) - Update SYMCRYPT_OPENSSL_VERSION in rules/symcrypt-openssl.mk to 1.9.4 - Update debian/control version to 1.9.4 SymCrypt 103.10.0 adds FIPS integrity verification via pyelftools (already installed by CI via requirements.txt). SymCrypt-OpenSSL 1.9.4 improves the provider interface, which is the preferred integration path for OpenSSL 3.x (engine API is deprecated). Tested on Debian Trixie (OpenSSL 3.5.4): - SymCrypt unit tests pass - symcryptprovider v1.9.4 loads and activates correctly - Verified on SONiC master VS KVM (kernel 6.12.41, Debian 13.3) Signed-off-by: securely1g --- rules/symcrypt-openssl.mk | 2 +- src/SymCrypt | 2 +- src/SymCrypt-OpenSSL | 2 +- src/SymCrypt-OpenSSL-Debian/debian/control | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/rules/symcrypt-openssl.mk b/rules/symcrypt-openssl.mk index f5f584c..e75ffb3 100644 --- a/rules/symcrypt-openssl.mk +++ b/rules/symcrypt-openssl.mk @@ -1,6 +1,6 @@ # SYMCRYPT_OPENSSL -SYMCRYPT_OPENSSL_VERSION = 1.5.2 +SYMCRYPT_OPENSSL_VERSION = 1.9.4 SYMCRYPT_OPENSSL = symcrypt-openssl_$(SYMCRYPT_OPENSSL_VERSION)_$(ARCH).deb $(SYMCRYPT_OPENSSL)_SRC_PATH = $(SRC_PATH)/SymCrypt-OpenSSL-Debian $(SYMCRYPT_OPENSSL)_MAKEFILE = Makefile diff --git a/src/SymCrypt b/src/SymCrypt index 53be637..b39181f 160000 --- a/src/SymCrypt +++ b/src/SymCrypt @@ -1 +1 @@ -Subproject commit 53be637dab201a4c9d95e1cf58040c85d71cf3c2 +Subproject commit b39181fbfb3e54e1b471f0d10864d0e7077626b8 diff --git a/src/SymCrypt-OpenSSL b/src/SymCrypt-OpenSSL index 1bf988b..9fd0228 160000 --- a/src/SymCrypt-OpenSSL +++ b/src/SymCrypt-OpenSSL @@ -1 +1 @@ -Subproject commit 1bf988bf5a87a6a901234badff007e88927a5b89 +Subproject commit 9fd02285101fe2bef78f1fe984469b7ec902666d diff --git a/src/SymCrypt-OpenSSL-Debian/debian/control b/src/SymCrypt-OpenSSL-Debian/debian/control index a2c6467..e6da078 100644 --- a/src/SymCrypt-OpenSSL-Debian/debian/control +++ b/src/SymCrypt-OpenSSL-Debian/debian/control @@ -1,5 +1,5 @@ Package: symcrypt-openssl -Version: 0.1 +Version: 1.9.4 Section: devel Priority: optional Architecture: all