Add Support for openssl v3.5 as a TLS Backend (#4959)

Author: nhorman

.github/workflows/build-darwin-framework.yml

@@ -21,8 +21,12 @@ permissions: read-all
 
 jobs:
   build-all-frameworks:
+    strategy:
+      matrix:
+        tls: ["quictls", "openssl"]
     name: Build All Darwin Frameworks (Release)
     uses: ./.github/workflows/build-reuse-darwin-framework.yml
     with:
       config: 'Release'
       repo: ${{ github.repository }}
+      tls: ${{ matrix.tls }}

.github/workflows/build-reuse-darwin-framework.yml

@@ -24,6 +24,7 @@ on:
         type: string
         # options:
         #   - quictls
+        #   - openssl 
       static:
         required: false
         default: ''
@@ -73,7 +74,7 @@ jobs:
         path: artifacts
     - name: Build Package
       shell: pwsh
-      run: scripts/merge-darwin.ps1 -DeleteSource -Config ${{ inputs.config }}
+      run: scripts/merge-darwin.ps1 -DeleteSource -Config ${{ inputs.config }} -Tls ${{ inputs.tls }}
     - name: Upload build artifacts
       uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
       with:
@@ -105,7 +106,7 @@ jobs:
         path: artifacts
     - name: Build Framework
       shell: pwsh
-      run: scripts/package-darwin-framework.ps1 -Config ${{ inputs.config }} -Platform ${{ matrix.vec.plat }} -Arch ${{ matrix.vec.arch }}
+      run: scripts/package-darwin-framework.ps1 -Config ${{ inputs.config }} -Platform ${{ matrix.vec.plat }} -Arch ${{ matrix.vec.arch }} -Tls ${{ inputs.tls }}
     - name: Upload build artifacts
       uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
       with:
@@ -125,23 +126,23 @@ jobs:
     - name: Download Build Artifacts (iOS x64)
       uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
       with:
-        name: Framework-${{ inputs.config }}-ios-macos-13-x64-quictls
+        name: Framework-${{ inputs.config }}-ios-macos-13-x64-${{ inputs.tls }}
         path: artifacts
     - name: Download Build Artifacts (iOS arm64)
       uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
       with:
-        name: Framework-${{ inputs.config }}-ios-macos-13-arm64-quictls
+        name: Framework-${{ inputs.config }}-ios-macos-13-arm64-${{ inputs.tls }}
         path: artifacts
     - name: Download Build Artifacts (MacOS Universal)
       uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093
       with:
-        name: Framework-${{ inputs.config }}-macos-macos-13-universal-quictls
+        name: Framework-${{ inputs.config }}-macos-macos-13-universal-${{ inputs.tls }}
         path: artifacts
     - name: Build XCFramework
       shell: pwsh
-      run: scripts/package-darwin-xcframework.ps1 -Config ${{ inputs.config }}
+      run: scripts/package-darwin-xcframework.ps1 -Config ${{ inputs.config }} -Tls ${{ inputs.tls }}
     - name: Upload build artifacts
       uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
       with:
-        name: XCFramework-${{ inputs.config }}
+        name: XCFramework-${{ inputs.config }}-${{ inputs.tls }}
         path: artifacts/frameworks

.github/workflows/build-reuse-unix.yml

@@ -52,6 +52,7 @@ on:
         type: string
         # options:
         #   - quictls
+        #   - openssl 
       static:
         required: false
         default: ''

.github/workflows/build-reuse-win.yml

@@ -49,6 +49,7 @@ on:
         type: string
         # options:
         #   - quictls
+        #   - openssl 
         #   - schannel
       static:
         required: false

.github/workflows/build-reuse-winkernel.yml

@@ -46,6 +46,7 @@ on:
         type: string
         # options:
         #   - quictls
+        #   - openssl 
         #   - schannel
       build:
         required: false

.github/workflows/build.yml

@@ -30,12 +30,14 @@ jobs:
         plat: [windows, uwp] # TODO: Support gamecore_console
         os: ['windows-2022']
         arch: [x86, x64, arm64]
-        tls: [schannel, quictls]
+        tls: [schannel, quictls, openssl]
         static: ['', '-Static']
         exclude:
         # OpenSSL/quictls doesn't support arm64
         - tls: quictls
           arch: arm64
+        - plat: uwp
+          tls: openssl
         # TODO: FIX: OpenSSL/quictls build fails with UWP
         - plat: uwp
           tls: quictls
@@ -99,7 +101,7 @@ jobs:
         plat: [linux]
         os: ['ubuntu-22.04', 'ubuntu-24.04']
         arch: [arm, arm64]
-        tls: [quictls]
+        tls: [quictls, openssl]
         static: ['', '-Static']
     uses: ./.github/workflows/build-reuse-unix.yml
     with:
@@ -121,7 +123,7 @@ jobs:
         plat: [linux, android]
         os: ['ubuntu-22.04', 'ubuntu-24.04']
         arch: [x86, x64]
-        tls: [quictls]
+        tls: [quictls, openssl]
         systemcrypto: ['', '-UseSystemOpenSSLCrypto']
         static: ['', '-Static']
         clang: ['', '-Clang']
@@ -133,6 +135,23 @@ jobs:
           arch: x86
         - plat: android
           systemcrypto: '-UseSystemOpenSSLCrypto'
+        # No openssl system crypto on ubuntu-22.04
+        - os: 'ubuntu-22.04'
+          tls: 'quictls'
+          systemcrypto: '-UseSystemOpenSSLCrypto'
+        # No openssl system crypto on ubuntu-24.04
+        - os: 'ubuntu-24.04'
+          tls: 'quictls'
+          systemcrypto: '-UseSystemOpenSSLCrypto'
+        # No openssl system crypto on ubuntu-22.04
+        - os: 'ubuntu-22.04'
+          tls: 'openssl'
+          systemcrypto: '-UseSystemOpenSSLCrypto'
+        # No openssl system crypto on ubuntu-24.04
+        - os: 'ubuntu-24.04'
+          tls: 'openssl'
+          systemcrypto: '-UseSystemOpenSSLCrypto'
+        # linux xdp is for ubuntu24.04 only for now
         - plat: android
           xdp: "-UseXdp"
         - plat: android
@@ -185,7 +204,7 @@ jobs:
         plat: [macos, ios]
         os: ['macos-13']
         arch: [x64, arm64]
-        tls: [quictls]
+        tls: [quictls, openssl]
         static: ['', '-Static']
     uses: ./.github/workflows/build-reuse-unix.yml
     with:
@@ -206,6 +225,7 @@ jobs:
         vec: [
           #{ plat: "uwp",  tls: "quictls", arg: "-UWP" }, # TODO: Fix build first
           { plat: "windows",  tls: "quictls" },
+          { plat: "windows",  tls: "openssl" },
           { plat: "windows",  tls: "schannel" },
         ]
     runs-on: windows-2022

.github/workflows/cargo.yml

@@ -21,14 +21,22 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest, macos-latest-xlarge]
-        features: ["", "--features static", "--features quictls", "--features quictls,static", "--features overwrite"]
+        vec: [
+          { tls: "quictls", features: "" },
+          { tls: "quictls", features: "--features static" },
+          { tls: "quictls", features: "--features quictls" },
+          { tls: "quictls", features: "--features quictls,static" },
+          { tls: "openssl", features: "--features openssl" },
+          { tls: "openssl", features: "--features openssl,static" },
+          { tls: "quictls", features: "--features overwrite" }
+        ]
     runs-on: ${{ matrix.os }}
     name: Cargo
     steps:
     - name: Checkout repository
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
     - name: Prepare Machine
-      run: scripts/prepare-machine.ps1 -Tls quictls -ForBuild -InstallTestCertificates
+      run: scripts/prepare-machine.ps1 -Tls ${{ matrix.vec.tls }} -ForBuild -InstallTestCertificates
       shell: pwsh
     - name: Install Perl
       if: runner.os == 'Windows'
@@ -46,9 +54,9 @@ jobs:
     - name: Cargo fmt
       run: cargo fmt --all -- --check
     - name: Cargo clippy
-      run: cargo clippy --all-targets ${{ matrix.features }} -- -D warnings
+      run: cargo clippy --all-targets ${{ matrix.vec.features }} -- -D warnings
     - name: Cargo build
-      run: cargo build --all ${{ matrix.features }}
+      run: cargo build --all ${{ matrix.vec.features }}
     - name: Check all generated files with git
       id: bindings_diff
       shell: bash
@@ -90,7 +98,7 @@ jobs:
       if: steps.bindings_diff.outputs.diff-found == 'true'
       run: exit 1
     - name: Cargo test
-      run: cargo test --all ${{ matrix.features }}
+      run: cargo test --all ${{ matrix.vec.features }}
     - name: Cargo Publish (dry run)
       run: cargo publish --dry-run --allow-dirty --no-verify
   # Test rust crate with preinstalled msquic lib.

.github/workflows/dotnet-test.yml

@@ -22,10 +22,14 @@ permissions: read-all
 jobs:
   build-darwin-frameworks:
     name: Build All Darwin Frameworks
+    strategy:
+      matrix:
+        tls: ["quictls", "openssl"]
     uses: ./.github/workflows/build-reuse-darwin-framework.yml
     with:
       config: 'Debug'
       repo: ${{ github.repository }}
+      tls: ${{ matrix.tls }}
 
   build-linux:
     name: Ubuntu
@@ -36,6 +40,8 @@ jobs:
         vec: [
           { plat: "linux", os: "ubuntu-22.04", arch: "x64", tls: "quictls" },
           { plat: "linux", os: "ubuntu-24.04", arch: "x64", tls: "quictls", xdp: "-UseXdp" },
+          { plat: "linux", os: "ubuntu-22.04", arch: "x64", tls: "openssl" },
+          { plat: "linux", os: "ubuntu-24.04", arch: "x64", tls: "openssl", xdp: "-UseXdp" },
         ]
     uses: ./.github/workflows/build-reuse-unix.yml
     with:
@@ -55,6 +61,7 @@ jobs:
       matrix:
         vec: [
           { plat: "windows", os: "windows-2022", arch: "x64", tls: "quictls" },
+          { plat: "windows", os: "windows-2022", arch: "x64", tls: "openssl" },
         ]
     uses: ./.github/workflows/build-reuse-win.yml
     with:
@@ -75,7 +82,10 @@ jobs:
           { plat: "windows", os: "windows-2022", arch: "x64", tls: "quictls" },
           { plat: "linux", os: "ubuntu-22.04", arch: "x64", tls: "quictls" },
           { plat: "linux", os: "ubuntu-24.04", arch: "x64", tls: "quictls", xdp: "-UseXdp" },
+          { plat: "linux", os: "ubuntu-22.04", arch: "x64", tls: "openssl" },
+          { plat: "linux", os: "ubuntu-24.04", arch: "x64", tls: "openssl", xdp: "-UseXdp" },
           { plat: "macos", os: "macos-13", arch: "universal", tls: "quictls" },
+          { plat: "macos", os: "macos-13", arch: "universal", tls: "openssl" },
         ]
     runs-on: ${{ matrix.vec.os }}
     steps:

.github/workflows/netperf.yml

@@ -18,6 +18,7 @@ on:
     - src/platform/**
     - src/perf/**
     - submodules/quictls/**
+    - submodules/openssl/**
     - submodules/xdp-for-windows/**
   pull_request:
     branches:
@@ -35,6 +36,7 @@ on:
     - src/platform/**
     - src/perf/**
     - submodules/quictls/**
+    - submodules/openssl/**
     - submodules/xdp-for-windows/**
 
 concurrency:

.github/workflows/package-reuse-linux.yml

@@ -33,6 +33,7 @@ on:
         type: string
         # options:
         #   - quictls
+        #   - openssl 
       static:
         required: false
         default: ''