DNM - OpenSSL in main#434

Draft

jwendell wants to merge 32 commits intoenvoyproxy:mainfrom

jwendell:openssl-main-4

Commits on Dec 18, 2025

Add bssl-compat: BoringSSL compatibility layer for OpenSSL

jwendell
and
claude
committed
Configure Bazel build system for OpenSSL and multi-architecture support

jwendell
and
claude
committed
Adapt Envoy source code for OpenSSL compatibility

jwendell
and
claude
committed
Add CI/CD automation and update documentation for envoy-openssl

jwendell
and
claude
committed
Add missing OpenSSL functions
jwendell
committed
Ability to build both SSL variants
jwendell
committed
Convert bssl-compat build from CMake to Bazel

authored and
jwendell
committed
Remove rules_go patch
jwendell
committed
Fix zlib location
jwendell
committed
Remove our own patch for v8 and ppc
jwendell
committed
Remove our own grpc patch for s390x
jwendell
committed
Use llvm toolchain from bazel rather than the system
jwendell
committed
Added missing bssl-compat functions

tedjpoole
authored and
jwendell
committed
Use clang instead of gcc; Adjust CI flags
jwendell
committed
Removed bssl-compat dependency on cmake && gawk

tedjpoole
authored and
jwendell
committed
Fix leak in bssl-compat SSL_get_servername()

tedjpoole
authored and
jwendell
committed
Fix leak in bssl-compat SSL_set_ocsp_response()

tedjpoole
authored and
jwendell
committed
Reduce differences
jwendell
committed
Fix tests under OpenSSL
jwendell
committed
Tidy up certificate ownership in SSL_set_chain_and_key()

tedjpoole
authored and
jwendell
committed
fix system library error messages

dgn
authored and
jwendell
committed
Reduce differences
jwendell
committed
Reduce differences - remove quiche patch for s390x
jwendell
committed
fix ssl flags
jwendell
committed
reduce differences
jwendell
committed
reduce differences
jwendell
committed
reduce differences: remove luajit2
jwendell
committed
reduce differences: remove s390x patches
jwendell
committed
reduce differences
jwendell
committed
skip a failng test in openssl
jwendell
committed
Fixed potential leaks in SSL_set_ocsp_response()

tedjpoole
authored and
jwendell
committed
Fixed potential leak in certificate selection callback

tedjpoole
authored and
jwendell
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

DNM - OpenSSL in main#434

DNM - OpenSSL in main#434
jwendell wants to merge 32 commits intoenvoyproxy:mainfrom
jwendell:openssl-main-4

Commits on Dec 18, 2025

Add bssl-compat: BoringSSL compatibility layer for OpenSSL

Configure Bazel build system for OpenSSL and multi-architecture support

Adapt Envoy source code for OpenSSL compatibility

Add CI/CD automation and update documentation for envoy-openssl

Add missing OpenSSL functions

Ability to build both SSL variants

Convert bssl-compat build from CMake to Bazel

Remove rules_go patch

Fix zlib location

Remove our own patch for v8 and ppc

Remove our own grpc patch for s390x

Use llvm toolchain from bazel rather than the system

Added missing bssl-compat functions

Use clang instead of gcc; Adjust CI flags

Removed bssl-compat dependency on cmake && gawk

Fix leak in bssl-compat SSL_get_servername()

Fix leak in bssl-compat SSL_set_ocsp_response()

Reduce differences

Fix tests under OpenSSL

Tidy up certificate ownership in SSL_set_chain_and_key()

fix system library error messages

Reduce differences

Reduce differences - remove quiche patch for s390x

fix ssl flags

reduce differences

reduce differences

reduce differences: remove luajit2

reduce differences: remove s390x patches

reduce differences

skip a failng test in openssl

Fixed potential leaks in SSL_set_ocsp_response()

Fixed potential leak in certificate selection callback