Update OpenSSL to the latest stable version (3.4.0)

We now build aarch64 wheels using a native runner.

Author: jlaine

.github/workflows/build.yml

@@ -13,7 +13,7 @@ jobs:
             arch: arm64
           - os: macos-13
             arch: x86_64
-          - os: ubuntu-latest
+          - os: ubuntu-24.04-arm
             arch: aarch64
           - os: ubuntu-latest
             arch: i686
@@ -27,10 +27,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
         with:
-          python-version: 3.8
-      - name: Install qemu
-        if: matrix.os == 'ubuntu-latest'
-        uses: docker/setup-qemu-action@v3
+          python-version: 3.11
       - name: Install nasm
         if: matrix.os == 'windows-latest'
         run: choco install -y nasm
@@ -39,7 +36,7 @@ jobs:
           CIBW_ARCHS: ${{ matrix.arch }}
           CIBW_BEFORE_BUILD: python scripts/build-openssl.py /tmp/vendor
           CIBW_BEFORE_BUILD_WINDOWS: scripts\build-openssl.bat C:\cibw\vendor
-          CIBW_BUILD: cp38-*
+          CIBW_BUILD: cp39-*
           CIBW_SKIP: '*-musllinux*'
           CIBW_TEST_COMMAND: python -c "import dummy"
         run: |

scripts/build-openssl.bat

@@ -21,7 +21,7 @@ call "C:\Program Files\Microsoft Visual Studio\2022\Enterprise\VC\Auxiliary\Buil
 SET PATH=%PATH%;C:\Program Files\NASM
 
 mkdir openssl
-curl -L https://www.openssl.org/source/openssl-3.3.0.tar.gz -o openssl.tar.gz
+curl -L https://www.openssl.org/source/openssl-3.4.0.tar.gz -o openssl.tar.gz
 tar xzf openssl.tar.gz -C openssl --strip-components 1
 cd openssl
 

scripts/build-openssl.py

@@ -74,7 +74,7 @@ def run(cmd, *, env=None):
     os.chdir(build_dir)
 
     # build openssl
-    extract("openssl", "https://www.openssl.org/source/openssl-3.3.0.tar.gz")
+    extract("openssl", "https://www.openssl.org/source/openssl-3.4.0.tar.gz")
     os.chdir("openssl")
     run(["./config"] + configure_args + ["no-apps", "no-comp", "no-dso", "no-shared", "no-tests"])
     run(["make"])