Upgrade OpenResty to 1.27.1.2 and OpenSSL to 3.4.1

Signed-off-by: Evan Wies <evan@neomantra.net>

Author: neomantra

CHANGELOG.md

@@ -1,6 +1,11 @@
 Changelog
 =========
 
+## 1.27.1.2-0 (2025-03-31)
+
+ * Upgrade OpenResty to 1.27.1.2
+ * Upgrade OpenSSL to 3.4.1
+
 ## 1.27.1.1-4 (2025-03-31)
 
  * Add `bookworm-buildpack` flavor. ([#267](https://github.com/openresty/docker-openresty/issues/267))

README.md

@@ -15,11 +15,11 @@ It is best practice to pin your images to an explicit image tag.  The [next sect
 
 | Image  | Description |
 | --- | --- |
-| `openresty/openresty:1.27.1.1-0-jammy` | Built-from-source Ubuntu Jammy |
-| `openresty/openresty:1.27.1.1-0-focal` | Built-from-source Ubuntu Focal |
-| `openresty/openresty:1.27.1.1-0-bookworm-fat` | Built-from-upstream Debian Bookworm |
-| `openresty/openresty:1.27.1.1-0-alpine` | Built-from-source Alpine |
-| `openresty/openresty:1.27.1.1-0-alpine-apk` | Built-from-upstream Alpine |
+| `openresty/openresty:1.27.1.2-0-jammy` | Built-from-source Ubuntu Jammy |
+| `openresty/openresty:1.27.1.2-0-focal` | Built-from-source Ubuntu Focal |
+| `openresty/openresty:1.27.1.2-0-bookworm-fat` | Built-from-upstream Debian Bookworm |
+| `openresty/openresty:1.27.1.2-0-alpine` | Built-from-source Alpine |
+| `openresty/openresty:1.27.1.2-0-alpine-apk` | Built-from-upstream Alpine |
 
 These are examples of untagged image names, for reference:
 
@@ -351,10 +351,10 @@ docker build --build-arg RESTY_J=4 -f jammy/Dockerfile .
 |:-----------------------------------------| :-----: |:----------- |
 | RESTY_IMAGE_BASE                        | "ubuntu" / "alpine" | The Debian or Alpine Docker image base to build `FROM`. |
 | RESTY_IMAGE_TAG                         | "noble" / "3.21.3" | The Debian or Alpine Docker image tag to build `FROM`. |
-| RESTY_VERSION                           | 1.27.1.1 | The version of OpenResty to use. |
+| RESTY_VERSION                           | 1.27.1.2 | The version of OpenResty to use. |
 | RESTY_LUAROCKS_VERSION                  | 3.11.1 | The version of LuaRocks to use. |
-| RESTY_OPENSSL_VERSION                   | 3.0.16 | The version of OpenSSL to use. |
-| RESTY_OPENSSL_PATCH_VERSION             | 3.0.15 | The version of OpenSSL to use when patching. |
+| RESTY_OPENSSL_VERSION                   | 3.4.1 | The version of OpenSSL to use. |
+| RESTY_OPENSSL_PATCH_VERSION             | 3.4.1 | The version of OpenSSL to use when patching. |
 | RESTY_OPENSSL_URL_BASE                  | "https://github.com/openssl/openssl/releases/download/openssl-${RESTY_OPENSSL_VERSION}" | The base of the URL to download OpenSSL from. |
 | RESTY_OPENSSL_BUILD_OPTIONS             | "enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 enable-weak-ssl-ciphers enable-ssl3 enable-ssl3-method enable-md2 enable-ktls enable-fips" | Options to tweak Resty's OpenSSL build. |
 | RESTY_PCRE_VERSION                      | 10.44 | The version of PCRE2 to use. |
@@ -435,7 +435,7 @@ docker build --build-arg RESTY_RPM_FLAVOR="-debug" -f fedora/Dockerfile .
 |RESTY_LUAROCKS_VERSION | 3.11.1 | The version of LuaRocks to use. |
 |RESTY_YUM_REPO | "https://openresty.org/package/centos/openresty.repo" | URL for the OpenResty YUM Repository. |
 |RESTY_RPM_FLAVOR | "" | The `openresty` package flavor to use.  Possibly `"-debug"` or `"-valgrind"`. |
-|RESTY_RPM_VERSION | "1.27.1.1-1" | The `openresty` package version to install. |
+|RESTY_RPM_VERSION | "1.27.1.2-1" | The `openresty` package version to install. |
 |RESTY_RPM_DIST | "el8" | The `openresty` package distribution to install. |
 |RESTY_RPM_ARCH | "x86_64" | The `openresty` package architecture to install. |
 
@@ -468,9 +468,9 @@ docker build --build-arg RESTY_DEB_FLAVOR="-debug" -f bullseye/Dockerfile .
 |RESTY_IMAGE_BASE  | "debian" | The Debian Docker image base to build `FROM`. |
 |RESTY_IMAGE_TAG   | "bullseye-slim" | The Debian Docker image tag to build `FROM`. |
 |RESTY_DEB_FLAVOR  | "" | The `openresty` package flavor to use.  Possibly `"-debug"` or `"-valgrind"`. |
-|RESTY_DEB_VERSION | "=1.27.1.1-1~bookworm1" | The [Debian package version](https://openresty.org/package/debian/pool/openresty/o/openresty/) to use, with `=` prepended. |
+|RESTY_DEB_VERSION | "=1.27.1.2-1~bookworm1" | The [Debian package version](https://openresty.org/package/debian/pool/openresty/o/openresty/) to use, with `=` prepended. |
 |RESTY_FAT_DEB_FLAVOR  | "" | The `openresty` package flavor to use to install "fat" packages.  Possibly `"-debug"` or `"-valgrind"`. |
-|RESTY_FAT_DEB_VERSION | "=1.27.1.1-1~bookworm1" | The [Debian package version](https://openresty.org/package/debian/pool/openresty/o/openresty/) to use to "fat" packages, with `=` prepended. |
+|RESTY_FAT_DEB_VERSION | "=1.27.1.2-1~bookworm1" | The [Debian package version](https://openresty.org/package/debian/pool/openresty/o/openresty/) to use to "fat" packages, with `=` prepended. |
 
  * For `amd64` builds, `RESTY_APT_REPO="https://openresty.org/package/debian"`
  * For `arm64` builds, `RESTY_APT_REPO="https://openresty.org/package/arm64/debian"`
@@ -500,7 +500,7 @@ docker build --build-arg RESTY_IMAGE_TAG="3.12" -f alpine-apk/Dockerfile .
 |RESTY_APK_ALPINE_VERSION | "3.18" | The Alpine version for RESTY_APK_REPO_URL. |
 |RESTY_APK_KEY_URL  | "https://openresty.org/package/admin@openresty.com-5ea678a6.rsa.pub" | The URL of the signing key of the `openresty` package. |
 |RESTY_APK_REPO_URL | "https://openresty.org/package/alpine/v${RESTY_APK_ALPINE_VERSION}/main" | The URL of the APK repository for `openresty` package. |
-|RESTY_APK_VERSION | "=1.27.1.1-r0" | The suffix to add to the apk install package name: `openresty${RESTY_APK_VERSION`}. |
+|RESTY_APK_VERSION | "=1.27.1.2-r0" | The suffix to add to the apk install package name: `openresty${RESTY_APK_VERSION`}. |
 
 [Back to TOC](#table-of-contents)
 
@@ -515,7 +515,7 @@ This Docker image can be built and customized by cloning the repo and running `d
 The following are the available build-time options. They can be set using the `--build-arg` CLI argument, like so:
 
 ```
-docker build --build-arg RESTY_VERSION="1.27.1.1" -f windows/Dockerfile .
+docker build --build-arg RESTY_VERSION="1.27.1.2" -f windows/Dockerfile .
 ```
 
 | Key | Default | Description |
@@ -524,7 +524,7 @@ docker build --build-arg RESTY_VERSION="1.27.1.1" -f windows/Dockerfile .
 |RESTY_INSTALL_TAG  | "4.8-windowsservercore-ltsc2019" | The Windows Server Docker image name to download and install OpenResty with. |
 |RESTY_IMAGE_BASE   | "mcr.microsoft.com/windows/nanoserver" | The Windows Server Docker image name to build `FROM` for final image. |
 |RESTY_IMAGE_TAG    | "1809" | The Windows Server Docker image tag to build `FROM` for final image. |
-|RESTY_VERSION      | 1.27.1.1 | The version of OpenResty to use. |
+|RESTY_VERSION      | 1.27.1.2 | The version of OpenResty to use. |
 
 [Back to TOC](#table-of-contents)
 

alpine-apk/Dockerfile

@@ -15,7 +15,7 @@ ARG RESTY_IMAGE_TAG="3.18.12"
 ARG RESTY_APK_ALPINE_VERSION="3.18"
 ARG RESTY_APK_KEY_URL="https://openresty.org/package/admin@openresty.com-5ea678a6.rsa.pub"
 ARG RESTY_APK_REPO_URL="https://openresty.org/package/alpine/v${RESTY_APK_ALPINE_VERSION}/main"
-ARG RESTY_APK_VERSION="=1.27.1.1-r0"
+ARG RESTY_APK_VERSION="=1.27.1.2-r0"
 
 LABEL resty_image_base="${RESTY_IMAGE_BASE}"
 LABEL resty_image_tag="${RESTY_IMAGE_TAG}"

alpine/Dockerfile

@@ -11,11 +11,11 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # Docker Build Arguments
 ARG RESTY_IMAGE_BASE="alpine"
 ARG RESTY_IMAGE_TAG="3.21.3"
-ARG RESTY_VERSION="1.27.1.1"
+ARG RESTY_VERSION="1.27.1.2"
 
 # https://github.com/openresty/openresty-packaging/blob/master/alpine/openresty-openssl3/APKBUILD
-ARG RESTY_OPENSSL_VERSION="3.0.16"
-ARG RESTY_OPENSSL_PATCH_VERSION="3.0.15"
+ARG RESTY_OPENSSL_VERSION="3.4.1"
+ARG RESTY_OPENSSL_PATCH_VERSION="3.4.1"
 ARG RESTY_OPENSSL_URL_BASE="https://github.com/openssl/openssl/releases/download/openssl-${RESTY_OPENSSL_VERSION}"
 # LEGACY:  "https://www.openssl.org/source/old/1.1.1"
 ARG RESTY_OPENSSL_BUILD_OPTIONS="enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 \
@@ -135,8 +135,8 @@ RUN apk add --no-cache --virtual .build-deps \
     && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz \
     && tar xzf openssl-${RESTY_OPENSSL_VERSION}.tar.gz \
     && cd openssl-${RESTY_OPENSSL_VERSION} \
-    && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-4) = "3.0." ] ; then \
-        echo 'patching OpenSSL 3.0.15 for OpenResty' \
+    && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-2) = "3." ] ; then \
+        echo 'patching OpenSSL 3.x for OpenResty' \
         && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; \
     fi \
     && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.1" ] ; then \

bionic/Dockerfile

@@ -11,12 +11,12 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # Docker Build Arguments
 ARG RESTY_IMAGE_BASE="ubuntu"
 ARG RESTY_IMAGE_TAG="bionic"
-ARG RESTY_VERSION="1.27.1.1"
+ARG RESTY_VERSION="1.27.1.2"
 ARG RESTY_LUAROCKS_VERSION="3.11.1"
 
 # https://github.com/openresty/openresty-packaging/blob/master/deb/openresty-openssl3/debian/rules
-ARG RESTY_OPENSSL_VERSION="3.0.16"
-ARG RESTY_OPENSSL_PATCH_VERSION="3.0.15"
+ARG RESTY_OPENSSL_VERSION="3.4.1"
+ARG RESTY_OPENSSL_PATCH_VERSION="3.4.1"
 ARG RESTY_OPENSSL_URL_BASE="https://github.com/openssl/openssl/releases/download/openssl-${RESTY_OPENSSL_VERSION}"
 # LEGACY:  "https://www.openssl.org/source/old/1.1.1"
 ARG RESTY_OPENSSL_BUILD_OPTIONS="enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 \
@@ -135,8 +135,8 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update \
     && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz \
     && tar xzf openssl-${RESTY_OPENSSL_VERSION}.tar.gz \
     && cd openssl-${RESTY_OPENSSL_VERSION} \
-    && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-4) = "3.0." ] ; then \
-        echo 'patching OpenSSL 3.0.15 for OpenResty' \
+    && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-2) = "3." ] ; then \
+        echo 'patching OpenSSL 3.x for OpenResty' \
         && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; \
     fi \
     && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.1" ] ; then \

bookworm/Dockerfile

@@ -12,7 +12,7 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # OpenResty Debian package variants.
 # For example: "-debug" or "-valgrind"
 ARG RESTY_DEB_FLAVOR=""
-ARG RESTY_DEB_VERSION="=1.27.1.1-1~bookworm1"
+ARG RESTY_DEB_VERSION="=1.27.1.2-1~bookworm1"
 ARG RESTY_APT_REPO="https://openresty.org/package/debian"
 ARG RESTY_APT_PGP="https://openresty.org/package/pubkey.gpg"
 ARG RESTY_APT_ARCH="amd64"

bookworm/Dockerfile.buildpack

@@ -12,7 +12,7 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # OpenResty Debian package variants.
 # For example: "-debug" or "-valgrind"
 ARG RESTY_DEB_FLAVOR=""
-ARG RESTY_DEB_VERSION="=1.27.1.1-1~bookworm1"
+ARG RESTY_DEB_VERSION="=1.27.1.2-1~bookworm1"
 ARG RESTY_APT_REPO="https://openresty.org/package/debian"
 ARG RESTY_APT_PGP="https://openresty.org/package/pubkey.gpg"
 ARG RESTY_APT_ARCH="amd64"

bookworm/Dockerfile.fat

@@ -19,7 +19,7 @@ ARG RESTY_FAT_IMAGE_TAG="bookworm"
 # OpenResty Debian package variants.
 # For example: "-debug" or "-valgrind"
 ARG RESTY_FAT_DEB_FLAVOR=""
-ARG RESTY_FAT_DEB_VERSION="=1.27.1.1-1~bookworm1"
+ARG RESTY_FAT_DEB_VERSION="=1.27.1.2-1~bookworm1"
 
 LABEL maintainer="Evan Wies <evan@neomantra.net>"
 LABEL resty_fat_deb_flavor="${RESTY_FAT_DEB_FLAVOR}"

bullseye/Dockerfile

@@ -12,7 +12,7 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # OpenResty Debian package variants.
 # For example: "-debug" or "-valgrind"
 ARG RESTY_DEB_FLAVOR=""
-ARG RESTY_DEB_VERSION="=1.27.1.1-1~bullseye1"
+ARG RESTY_DEB_VERSION="=1.27.1.2-1~bullseye1"
 ARG RESTY_APT_REPO="https://openresty.org/package/debian"
 ARG RESTY_APT_PGP="https://openresty.org/package/pubkey.gpg"
 ARG RESTY_IMAGE_BASE="debian"

bullseye/Dockerfile.debug

@@ -12,7 +12,7 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # OpenResty Debian package variants.
 # For example: "-debug" or "-valgrind"
 ARG RESTY_DEB_FLAVOR="-debug"
-ARG RESTY_DEB_VERSION="=1.27.1.1-1~bullseye1"
+ARG RESTY_DEB_VERSION="=1.27.1.2-1~bullseye1"
 ARG RESTY_APT_REPO="https://openresty.org/package/debian"
 ARG RESTY_APT_PGP="https://openresty.org/package/pubkey.gpg"
 ARG RESTY_IMAGE_BASE="debian"

bullseye/Dockerfile.fat

@@ -19,7 +19,7 @@ ARG RESTY_FAT_IMAGE_TAG="bullseye"
 # OpenResty Debian package variants.
 # For example: "-debug" or "-valgrind"
 ARG RESTY_FAT_DEB_FLAVOR=""
-ARG RESTY_FAT_DEB_VERSION="=1.27.1.1-1~bullseye1"
+ARG RESTY_FAT_DEB_VERSION="=1.27.1.2-1~bullseye1"
 
 LABEL maintainer="Evan Wies <evan@neomantra.net>"
 LABEL resty_fat_deb_flavor="${RESTY_FAT_DEB_FLAVOR}"

bullseye/Dockerfile.valgrind

@@ -12,7 +12,7 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # OpenResty Debian package variants.
 # For example: "-debug" or "-valgrind"
 ARG RESTY_DEB_FLAVOR="-valgrind"
-ARG RESTY_DEB_VERSION="=1.27.1.1-1~bullseye1"
+ARG RESTY_DEB_VERSION="=1.27.1.2-1~bullseye1"
 ARG RESTY_APT_REPO="https://openresty.org/package/debian"
 ARG RESTY_APT_PGP="https://openresty.org/package/pubkey.gpg"
 ARG RESTY_IMAGE_BASE="debian"

buster/Dockerfile

@@ -12,7 +12,7 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # OpenResty Debian package variants.
 # For example: "-debug" or "-valgrind"
 ARG RESTY_DEB_FLAVOR=""
-ARG RESTY_DEB_VERSION="=1.27.1.1-1~buster1"
+ARG RESTY_DEB_VERSION="=1.27.1.2-1~buster1"
 ARG RESTY_APT_REPO="https://openresty.org/package/debian"
 ARG RESTY_APT_PGP="https://openresty.org/package/pubkey.gpg"
 ARG RESTY_IMAGE_BASE="debian"

buster/Dockerfile.fat

@@ -19,7 +19,7 @@ ARG RESTY_FAT_IMAGE_TAG="buster"
 # OpenResty Debian package variants.
 # For example: "-debug" or "-valgrind"
 ARG RESTY_FAT_DEB_FLAVOR=""
-ARG RESTY_FAT_DEB_VERSION="=1.27.1.1-1~buster1"
+ARG RESTY_FAT_DEB_VERSION="=1.27.1.2-1~buster1"
 
 LABEL maintainer="Evan Wies <evan@neomantra.net>"
 LABEL resty_fat_deb_flavor="${RESTY_FAT_DEB_FLAVOR}"

centos/Dockerfile

@@ -13,7 +13,7 @@ ARG RESTY_IMAGE_TAG="8"
 ARG RESTY_LUAROCKS_VERSION="3.11.1"
 ARG RESTY_YUM_REPO="https://openresty.org/package/centos/openresty.repo"
 ARG RESTY_RPM_FLAVOR=""
-ARG RESTY_RPM_VERSION="1.27.1.1-1"
+ARG RESTY_RPM_VERSION="1.27.1.2-1"
 ARG RESTY_RPM_DIST="el8"
 ARG RESTY_RPM_ARCH="x86_64"
 

centos/Dockerfile.expat_example

@@ -1,6 +1,6 @@
-ARG OPENRESTY_VERSION="1.27.1.1-0"
+ARG OPENRESTY_VERSION="1.27.1.2-0"
 FROM "openresty/openresty:${OPENRESTY_VERSION}-centos"  # locally I needed to add "-aarch64"
-ARG OPENRESTY_VERSION="1.27.1.1-0"
+ARG OPENRESTY_VERSION="1.27.1.2-0"
 
 # Install dependencies
 RUN yum -y install gcc

centos7/Dockerfile

@@ -13,7 +13,7 @@ ARG RESTY_IMAGE_TAG="7"
 ARG RESTY_LUAROCKS_VERSION="3.11.1"
 ARG RESTY_YUM_REPO="https://openresty.org/package/centos/openresty.repo"
 ARG RESTY_RPM_FLAVOR=""
-ARG RESTY_RPM_VERSION="1.27.1.1-1"
+ARG RESTY_RPM_VERSION="1.27.1.2-1"
 ARG RESTY_RPM_DIST="el7"
 ARG RESTY_RPM_ARCH="x86_64"
 

fedora/Dockerfile

@@ -13,7 +13,7 @@ ARG RESTY_IMAGE_TAG="36"
 ARG RESTY_LUAROCKS_VERSION="3.11.1"
 ARG RESTY_YUM_REPO="https://openresty.org/package/fedora/openresty.repo"
 ARG RESTY_RPM_FLAVOR=""
-ARG RESTY_RPM_VERSION="1.27.1.1-1"
+ARG RESTY_RPM_VERSION="1.27.1.2-1"
 ARG RESTY_RPM_DIST="fc36"
 ARG RESTY_RPM_ARCH="x86_64"
 

focal/Dockerfile

@@ -11,12 +11,12 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # Docker Build Arguments
 ARG RESTY_IMAGE_BASE="ubuntu"
 ARG RESTY_IMAGE_TAG="focal"
-ARG RESTY_VERSION="1.27.1.1"
+ARG RESTY_VERSION="1.27.1.2"
 ARG RESTY_LUAROCKS_VERSION="3.11.1"
 
 # https://github.com/openresty/openresty-packaging/blob/master/deb/openresty-openssl3/debian/rules
-ARG RESTY_OPENSSL_VERSION="3.0.16"
-ARG RESTY_OPENSSL_PATCH_VERSION="3.0.15"
+ARG RESTY_OPENSSL_VERSION="3.4.1"
+ARG RESTY_OPENSSL_PATCH_VERSION="3.4.1"
 ARG RESTY_OPENSSL_URL_BASE="https://github.com/openssl/openssl/releases/download/openssl-${RESTY_OPENSSL_VERSION}"
 # LEGACY:  "https://www.openssl.org/source/old/1.1.1"
 ARG RESTY_OPENSSL_BUILD_OPTIONS="enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 \
@@ -135,8 +135,8 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update \
     && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz \
     && tar xzf openssl-${RESTY_OPENSSL_VERSION}.tar.gz \
     && cd openssl-${RESTY_OPENSSL_VERSION} \
-    && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-4) = "3.0." ] ; then \
-        echo 'patching OpenSSL 3.0.15 for OpenResty' \
+    && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-2) = "3." ] ; then \
+        echo 'patching OpenSSL 3.x for OpenResty' \
         && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; \
     fi \
     && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.1" ] ; then \

jammy/Dockerfile

@@ -11,12 +11,12 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # Docker Build Arguments
 ARG RESTY_IMAGE_BASE="ubuntu"
 ARG RESTY_IMAGE_TAG="jammy"
-ARG RESTY_VERSION="1.27.1.1"
+ARG RESTY_VERSION="1.27.1.2"
 ARG RESTY_LUAROCKS_VERSION="3.11.1"
 
 # https://github.com/openresty/openresty-packaging/blob/master/deb/openresty-openssl3/debian/rules
-ARG RESTY_OPENSSL_VERSION="3.0.16"
-ARG RESTY_OPENSSL_PATCH_VERSION="3.0.15"
+ARG RESTY_OPENSSL_VERSION="3.4.1"
+ARG RESTY_OPENSSL_PATCH_VERSION="3.4.1"
 ARG RESTY_OPENSSL_URL_BASE="https://github.com/openssl/openssl/releases/download/openssl-${RESTY_OPENSSL_VERSION}"
 # LEGACY:  "https://www.openssl.org/source/old/1.1.1"
 ARG RESTY_OPENSSL_BUILD_OPTIONS="enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 \
@@ -135,8 +135,8 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update \
     && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz \
     && tar xzf openssl-${RESTY_OPENSSL_VERSION}.tar.gz \
     && cd openssl-${RESTY_OPENSSL_VERSION} \
-    && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-4) = "3.0." ] ; then \
-        echo 'patching OpenSSL 3.0.15 for OpenResty' \
+    && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-2) = "3." ] ; then \
+        echo 'patching OpenSSL 3.x for OpenResty' \
         && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; \
     fi \
     && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.1" ] ; then \

noble/Dockerfile

@@ -11,12 +11,12 @@ LABEL maintainer="Evan Wies <evan@neomantra.net>"
 # Docker Build Arguments
 ARG RESTY_IMAGE_BASE="ubuntu"
 ARG RESTY_IMAGE_TAG="noble"
-ARG RESTY_VERSION="1.27.1.1"
+ARG RESTY_VERSION="1.27.1.2"
 ARG RESTY_LUAROCKS_VERSION="3.11.1"
 
 # https://github.com/openresty/openresty-packaging/blob/master/deb/openresty-openssl3/debian/rules
-ARG RESTY_OPENSSL_VERSION="3.0.16"
-ARG RESTY_OPENSSL_PATCH_VERSION="3.0.15"
+ARG RESTY_OPENSSL_VERSION="3.4.1"
+ARG RESTY_OPENSSL_PATCH_VERSION="3.4.1"
 ARG RESTY_OPENSSL_URL_BASE="https://github.com/openssl/openssl/releases/download/openssl-${RESTY_OPENSSL_VERSION}"
 # LEGACY:  "https://www.openssl.org/source/old/1.1.1"
 ARG RESTY_OPENSSL_BUILD_OPTIONS="enable-camellia enable-seed enable-rfc3779 enable-cms enable-md2 enable-rc5 \
@@ -135,8 +135,8 @@ RUN DEBIAN_FRONTEND=noninteractive apt-get update \
     && curl -fSL "${RESTY_OPENSSL_URL_BASE}/openssl-${RESTY_OPENSSL_VERSION}.tar.gz" -o openssl-${RESTY_OPENSSL_VERSION}.tar.gz \
     && tar xzf openssl-${RESTY_OPENSSL_VERSION}.tar.gz \
     && cd openssl-${RESTY_OPENSSL_VERSION} \
-    && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-4) = "3.0." ] ; then \
-        echo 'patching OpenSSL 3.0.15 for OpenResty' \
+    && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-2) = "3." ] ; then \
+        echo 'patching OpenSSL 3.x for OpenResty' \
         && curl -s https://raw.githubusercontent.com/openresty/openresty/master/patches/openssl-${RESTY_OPENSSL_PATCH_VERSION}-sess_set_get_cb_yield.patch | patch -p1 ; \
     fi \
     && if [ $(echo ${RESTY_OPENSSL_VERSION} | cut -c 1-5) = "1.1.1" ] ; then \