openssl locked to 3.5.6

Signed-off-by: Pratik Mankawde <[email protected]>

CMakeLists.txt

@@ -23,7 +23,11 @@ include(CompilationEnv)
 
 if(is_gcc)
     # GCC-specific fixes
-    add_compile_options(-Wno-unknown-pragmas -Wno-subobject-linkage)
+    add_compile_options(
+        -Wno-unknown-pragmas
+        -Wno-subobject-linkage
+        -Wno-error=deprecated-declarations
+    )
     # -Wno-subobject-linkage can be removed when we upgrade GCC version to at least 13.3
 elseif(is_clang)
     # Clang-specific fixes
@@ -81,7 +85,11 @@ if(only_docs)
 endif()
 
 include(deps/Boost)
-
+find_package(OpenSSL 3.5.6 REQUIRED)
+set_target_properties(
+    OpenSSL::SSL
+    PROPERTIES INTERFACE_COMPILE_DEFINITIONS OPENSSL_NO_SSL2
+)
 add_subdirectory(external/antithesis-sdk)
 find_package(date REQUIRED)
 find_package(ed25519 REQUIRED)

conan.lock

@@ -10,7 +10,7 @@
         "rocksdb/10.5.1#4a197eca381a3e5ae8adf8cffa5aacd0%1765850186.86",
         "re2/20251105#8579cfd0bda4daf0683f9e3898f964b4%1774398111.888",
         "protobuf/6.33.5#d96d52ba5baaaa532f47bda866ad87a5%1774467363.12",
-        "openssl/3.6.2#4789bbf131b77d0515d15e094c8f697f%1778071755.506",
+        "openssl/3.5.6#13f8f30151479797ca8a7c014856f849%1775635548.661",
         "nudb/2.0.9#11149c73f8f2baff9a0198fe25971fc7%1775040983.408",
         "lz4/1.10.0#59fc63cac7f10fbe8e05c7e62c2f3504%1765850143.914",
         "libiconv/1.17#1e65319e945f2d31941a9d28cc13c058%1765842973.492",
@@ -58,6 +58,9 @@
         ],
         "lz4/[>=1.9.4 <2]": [
             "lz4/1.10.0#59fc63cac7f10fbe8e05c7e62c2f3504"
+        ],
+        "sqlite3/3.44.2": [
+            "sqlite3/3.49.1"
         ]
     },
     "config_requires": []

conanfile.py

@@ -4,6 +4,8 @@ from conan.tools.cmake import CMake, CMakeToolchain, cmake_layout
 
 from conan import ConanFile
 
+import subprocess
+
 
 class Xrpl(ConanFile):
     name = "xrpl"
@@ -31,7 +33,7 @@ class Xrpl(ConanFile):
         "grpc/1.78.1",
         "libarchive/3.8.7",
         "nudb/2.0.9",
-        "openssl/3.6.2",
+        "openssl/3.5.6",
         "secp256k1/0.7.1",
         "soci/4.0.3",
         "zlib/1.3.2",

src/tests/libxrpl/basics/openssl.cpp

@@ -0,0 +1,62 @@
+//------------------------------------------------------------------------------
+/*
+    This file is part of rippled: https://github.com/ripple/rippled
+    Copyright (c) 2025 Ripple Labs Inc.
+
+    Permission to use, copy, modify, and/or distribute this software for any
+    purpose  with  or without fee is hereby granted, provided that the above
+    copyright notice and this permission notice appear in all copies.
+
+    THE  SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+    WITH  REGARD  TO  THIS  SOFTWARE  INCLUDING  ALL  IMPLIED  WARRANTIES  OF
+    MERCHANTABILITY  AND  FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+    ANY  SPECIAL ,  DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+    WHATSOEVER  RESULTING  FROM  LOSS  OF USE, DATA OR PROFITS, WHETHER IN AN
+    ACTION  OF  CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+*/
+//==============================================================================
+
+#include <xrpl/basics/Slice.h>
+#include <xrpl/protocol/digest.h>
+
+#include <doctest/doctest.h>
+
+#include <cmath>
+#include <cstdint>
+#include <iostream>
+#include <random>
+#include <vector>
+
+using namespace ripple;
+
+static std::vector<char> const data = []() {
+    std::vector<char> strV(pow(10, 5));
+    std::random_device rd;
+    std::mt19937 gen(rd());
+    std::uniform_int_distribution<int> dis(32, 127);
+    for (size_t index = 0; index < strV.size(); ++index)
+    {
+        strV[index] = static_cast<char>(dis(gen));
+    }
+    return strV;
+}();
+
+TEST_SUITE_BEGIN("OpenSSL");
+
+TEST_CASE("SingleHashFullSlice")
+{
+    Slice const s{data.data(), data.size()};
+    auto hash = sha512Half(s);
+}
+
+TEST_CASE("MultihashAllSlices")
+{
+    for (std::size_t i = 0; i < data.size(); ++i)
+    {
+        Slice s(&data[i], data.size() - i);
+        auto hash = sha512Half(s);
+    }
+}
+
+TEST_SUITE_END();