openssl/Configurations/10-main.conf, branch dependabot/github_actions/actions/setup-python-7

Drop Windows-on-Itanium (VC-WIN64I) support.

2026-07-10T17:39:24Z

Similar to Windows CE, Windows Itanium has not had a toolchain to work on it since VS 2010, and Windows server 2008 was the last thing that ran on it. This does *not* change the other (linux, HPUX) targets which have modern toolchain support, and likely even still run these days. While never letting go seems noble when you won't share the door you're floating on, the time has come. Reviewed-by: Milan Broz Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Fri Jul 10 17:39:39 2026 (Merged from https://github.com/openssl/openssl/pull/31913)

Allow MinGW-w64 builds to use BCryptGenRandom

2026-07-10T12:05:02Z

MinGW-w64 has provided bcrypt headers and import libraries since version 2.0, but OpenSSL only enabled the BCryptGenRandom seeding path for supported MSVC builds. Enable the existing direct BCryptGenRandom flow for MinGW-w64 when targeting Windows Vista or newer, and link MinGW builds with bcrypt alongside the other Windows import libraries. Use __MINGW64_VERSION_MAJOR to detect MinGW-w64 because it is defined by both the 32-bit and 64-bit MinGW-w64 toolchains. Builds targeting older Windows versions keep the CryptoAPI fallback because USE_BCRYPTGENRANDOM remains disabled when _WIN32_WINNT is below 0x0600. Fixes #13878 Reviewed-by: Milan Broz Reviewed-by: Nikola Pajkovsky Reviewed-by: Neil Horman MergeDate: Fri Jul 10 12:05:09 2026 (Merged from https://github.com/openssl/openssl/pull/13882)

We no longer need to test for GCC versions this old

2026-07-10T11:47:13Z

The minimum gcc to compile our code appears to be version 9, and we are now C99. All these older checks become a tautology on anything that will build a modern OpenSSL tree, so clean this up. Reviewed-by: Milan Broz Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Fri Jul 10 11:47:17 2026 (Merged from https://github.com/openssl/openssl/pull/31677)

Drop Windows CE support.

2026-06-25T07:26:55Z

Windows CE has been out of mainstream support since 2018 and will not have a modern toolchain capable of compiling a modern OpenSSL. The vc_wince_info Perl helper, the crypto/LPdir_wince.c directory backend, and a long tail of _WIN32_WCE / OPENSSL_SYS_WINCE guards across the Windows code paths get removed. Spotted by idrassi. Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz MergeDate: Thu Jun 25 07:27:18 2026 (Merged from https://github.com/openssl/openssl/pull/31601)

Add /MTd build for debug configuration for VC-noCE-common

2026-05-06T19:17:12Z

Fixes #30936 Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov MergeDate: Wed May 6 19:17:18 2026 (Merged from https://github.com/openssl/openssl/pull/31073)

Windows: Use /Z7 compiler flag to enable parallel builds

2026-04-13T08:45:52Z

MSVC compilation on Windows cannot be reliably parallelized with tools like jom (an nmake replacement) due to contention on shared .pdb files used for debug info. Writes to a shared .pdb must be serialized. The /FS compiler flag serializes concurrent compiler writes, but does not resolve contention when the compiler and linker access the same .pdb file. With shared .pdb files (e.g. app.pdb), the makefile does not prevent races between the linker and compilation of multiple targets. This can be resolved either by restructuring the makefile to introduce sentinel dependencies that serialize the conflicting steps, or by eliminating the shared .pdb entirely. This patch takes the latter approach: it replaces /Zi with /Z7, which embeds debug info directly into each .obj file and avoids any shared-file contention. /Z7 is supported by all MSVC versions. The linker-generated .pdb is unaffected. Side effects: object files are slightly larger, and all .pdb files are now named after their target — the shared app.pdb, ossl_static.pdb, and dso.pdb no longer exist. With this change, jom can be used to parallelize the build. Fixes: #9931 Signed-off-by: Milan Broz Reviewed-by: Neil Horman Reviewed-by: Norbert Pocs MergeDate: Mon Apr 13 08:46:20 2026 (Merged from https://github.com/openssl/openssl/pull/30703)

Configurations/10-main.conf: minimum NASM version needs to be 2.09 on Windows

2026-03-31T01:46:43Z

Otherwise some assembler code might be miscompiled. Fixes: https://github.com/openssl/openssl/issues/20529 Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale MergeDate: Tue Mar 31 01:47:41 2026 (Merged from https://github.com/openssl/openssl/pull/30576)

remove OPENSSL_USE_NODELETE from the config

2026-03-04T10:21:07Z

Commits 31659fe326 (Introduce OPENSSL_ATEXIT_CLEANUP env. variable., 2025-11-24) and 994413f995 (Update NEWS.md, 2025-12-15) removed the last uses of this macro. Remove it in the configuration as well. Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Wed Mar 4 10:21:36 2026 (Merged from https://github.com/openssl/openssl/pull/30199)

Add abilty to use static vcruntime

2026-02-17T09:43:35Z

Add a config option to selectively enable disable static vcruntime linkage (default disabled, implying dynamic vcruntime linkage) Fixes #12210 Reviewed-by: Norbert Pocs Reviewed-by: Tomas Mraz MergeDate: Tue Feb 17 09:43:37 2026 (Merged from https://github.com/openssl/openssl/pull/29995)

Drop darwin-ppc{,64} targets

2026-01-22T09:54:17Z

PowerPC support has been dropped in Mac OS X with the release of Mac OS X Lion (10.7) in 2010, and the last supporting release, Snow Leopard (10.6.x) is out of support since 2011. Also remove Rhapsody (the Mac OS X precursor) targets. Complements: https://github.com/openssl/openssl/pull/29653 Signed-off-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Nikola Pajkovsky MergeDate: Thu Jan 22 09:55:26 2026 (Merged from https://github.com/openssl/openssl/pull/29672)