Add openssl 3.6.0

[b-dean]

Description

If I have a project with an openssl version of 3.6.0, and I build for CentOS/RHEL, I get the following error when it tries to apply openssl-3.2.4-do-not-install-docs.patch:

       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 | Starting build
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 | Version overridden from 1.0.2zg to 3.6.0
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 | Environment:
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 |   CFLAGS="-I/opt/example/embedded/include -O3 -D_FORTIFY_SOURCE=2 -fstack-protector"
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 |   CPPFLAGS="-I/opt/example/embedded/include -O3 -D_FORTIFY_SOURCE=2 -fstack-protector"
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 |   CXXFLAGS="-I/opt/example/embedded/include -O3 -D_FORTIFY_SOURCE=2 -fstack-protector"
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 |   LDFLAGS="-Wl,-rpath,/opt/example/embedded/lib -L/opt/example/embedded/lib"
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 |   LD_RUN_PATH="/opt/example/embedded/lib"
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 |   OMNIBUS_INSTALL_DIR="/opt/example"
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 |   PATH="/opt/example/bin:/opt/example/embedded/bin:/work/.vendor/bundle/ruby/3.3.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/omnibus-toolchain/bin:/opt/omnibus-toolchain/embedded/bin/"
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 |   PKG_CONFIG_PATH="/opt/example/embedded/lib/pkgconfig"
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 | $ patch -p1 -i /work/.vendor/bundle/ruby/3.3.0/bundler/gems/omnibus-software-ff10111e43ae/config/patches/openssl/openssl-3.2.4-do-not-install-docs.patch
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 | Apply patch `openssl-3.2.4-do-not-install-docs.patch': 0.0053s
       [Builder: openssl] I | 2025-11-15T03:39:12+00:00 | Build openssl: 0.0054s
The following shell command exited with status 1:

    $ CFLAGS=-I/opt/example/embedded/include -O3 -D_FORTIFY_SOURCE=2 -fstack-protector CPPFLAGS=-I/opt/example/embedded/include -O3 -D_FORTIFY_SOURCE=2 -fstack-protector CXXFLAGS=-I/opt/example/embedded/include -O3 -D_FORTIFY_SOURCE=2 -fstack-protector LDFLAGS=-Wl,-rpath,/opt/example/embedded/lib -L/opt/example/embedded/lib LD_RUN_PATH=/opt/example/embedded/lib OMNIBUS_INSTALL_DIR=/opt/example PATH=/opt/example/bin:/opt/example/embedded/bin:/work/.vendor/bundle/ruby/3.3.0/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/omnibus-toolchain/bin:/opt/omnibus-toolchain/embedded/bin/ PKG_CONFIG_PATH=/opt/example/embedded/lib/pkgconfig patch -p1 -i /work/.vendor/bundle/ruby/3.3.0/bundler/gems/omnibus-software-d268bbd29dfa/config/patches/openssl/openssl-3.2.4-do-not-install-docs.patch

Output:

    patching file Configurations/unix-Makefile.tmpl
Hunk #1 FAILED at 625.
1 out of 1 hunk FAILED -- saving rejects to file Configurations/unix-Makefile.tmpl.rej
patching file Configurations/windows-makefile.tmpl
Hunk #1 succeeded at 466 (offset 11 lines).

Error:

    (nothing)

The project file looks something like this:

name 'example'
override :openssl, version: '3.6.0', fips_version: '3.1.2', source: {sha256: 'b6a5f44b7eb69e3fa35dbf15524405b44837a481d43d81daddde3ff21fcbb8e9' }
# ... and so on ...

In OpenSSL 3.6.0, Configurations/unix-Makefile.tmpl has changed and the old patch for 3.2.4 no longer applies.
See the commit in openssl repo: openssl/openssl@29eb7e0

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)
• Chore (non-breaking change that does not add functionality or fix an issue)

Checklist:

• I have read the CONTRIBUTING document.
• I have run the pre-merge tests locally and they pass.
• I have updated the documentation accordingly.
• I have added tests to cover my changes.
• If Gemfile.lock has changed, I have used --conservative to do it and included the full output in the Description above.
• All new and existing tests passed.
• All commits have been signed-off for the Developer Certificate of Origin.

[sonarqubecloud]

Quality Gate passed

Issues
6 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud