From f4889e7895e606ef76615b6813fb40b91d3bc491 Mon Sep 17 00:00:00 2001
From: Joe Orton <joe@manyfish.uk>
Date: Fri, 28 Aug 2026 21:42:10 +0100
Subject: [PATCH] CI: Update the OpenSSL builds to the latest releases: 3.0.21
 -> 3.0.22, 3.4.6 -> 3.4.7, 3.5.7 -> 3.5.8 and 4.0.1 -> 4.0.2.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 .github/workflows/linux.yml | 10 +++++-----
 test/README.ci              |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 5fe8e437569..1dee646e228 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -328,7 +328,7 @@ jobs:
             config: --enable-mods-shared=most --enable-maintainer-mode --disable-md --disable-http2 --disable-ldap --disable-crypto
             config-no-output: HAVE_NGHTTP2 HAVE_CURL
             env: |
-              TEST_OPENSSL3=3.0.21
+              TEST_OPENSSL3=3.0.22
               APR_VERSION=1.7.6
               APU_VERSION=1.6.5
               APU_CONFIG="--without-crypto"
@@ -337,7 +337,7 @@ jobs:
             config: --enable-mods-shared=most --enable-maintainer-mode --disable-md --disable-http2 --disable-ldap --disable-crypto
             notest-cflags: -Werror -O2
             env: |
-              TEST_OPENSSL3=3.4.6
+              TEST_OPENSSL3=3.4.7
               APR_VERSION=1.7.6
               APU_VERSION=1.6.5
               APU_CONFIG="--without-crypto"
@@ -345,7 +345,7 @@ jobs:
           - name: OpenSSL 3.4 no-engine
             config: --enable-mods-shared=most --enable-maintainer-mode --disable-md --disable-http2 --disable-ldap --disable-crypto
             env: |
-              TEST_OPENSSL3=3.4.6
+              TEST_OPENSSL3=3.4.7
               OPENSSL_CONFIG=no-engine
               APR_VERSION=1.7.6
               APU_VERSION=1.6.5
@@ -355,7 +355,7 @@ jobs:
             config: --enable-mods-shared=most --enable-maintainer-mode --disable-md --disable-http2 --disable-ldap --disable-crypto
             notest-cflags: -Werror -O2
             env: |
-              TEST_OPENSSL3=3.5.7
+              TEST_OPENSSL3=3.5.8
               OPENSSL_CONFIG=no-engine
               APR_VERSION=1.7.6
               APU_VERSION=1.6.5
@@ -365,7 +365,7 @@ jobs:
             config: --enable-mods-shared=most --enable-maintainer-mode --disable-md --disable-http2 --disable-ldap --disable-crypto
             notest-cflags: -Werror -O2
             env: |
-              TEST_OPENSSL3=4.0.1
+              TEST_OPENSSL3=4.0.2
               OPENSSL_CONFIG=
               APR_VERSION=1.7.6
               APU_VERSION=1.6.5
diff --git a/test/README.ci b/test/README.ci
index dbfd62aff62..8833f6000f0 100644
--- a/test/README.ci
+++ b/test/README.ci
@@ -51,7 +51,7 @@ The CI scripts use the following environment variables:
 * TEST_SSL - set for job with SSL/TLS testing variants (encrypted
   private keys, session cache backends via redis/memcache/shmcb, etc.)
 
-* TEST_OPENSSL3 - if set to a version string (e.g. "3.4.6"), that
+* TEST_OPENSSL3 - if set to a version string (e.g. "3.4.7"), that
   version of OpenSSL is built from source and used for mod_ssl.
   Requires non-system APR/APR-util (APR_VERSION must also be set).