feat: update to OpenSSL 3.5.x (#615)

OpenSSL 3.5 is the new LTS version

Author: mayeut

noxfile.py

@@ -159,7 +159,7 @@ def bump_openssl(session: nox.Session) -> None:
     files = (
         "scripts/manylinux-build-and-install-openssl.sh",
     )
-    _bump(session, "OpenSSL", "openssl/openssl", "3.0", "scripts/update_openssl_version.py", files)
+    _bump(session, "OpenSSL", "openssl/openssl", "3.5", "scripts/update_openssl_version.py", files)
 
 
 def _get_version() -> str:

scripts/manylinux-build-and-install-openssl.sh

@@ -10,8 +10,8 @@ set -o pipefail
 MY_DIR=$(dirname "${BASH_SOURCE[0]}")
 source $MY_DIR/utils.sh
 
-OPENSSL_ROOT=openssl-3.0.16
-OPENSSL_HASH=57e03c50feab5d31b152af2b764f10379aecd8ee92f16c985983ce4a99f7ef86
+OPENSSL_ROOT=openssl-3.5.1
+OPENSSL_HASH=529043b15cffa5f36077a4d0af83f3de399807181d607441d734196d889b641f
 
 cd /tmp
 

scripts/update_openssl_version.py

@@ -45,7 +45,7 @@ def get_openssl_sha256(version: str, verbose: bool=False) -> str:
         if len(parts) > 1:
             expected_parts = 2  #  f"{sha256} {filename}""
             assert len(parts) == expected_parts
-            assert parts[1] == f"openssl-{version}.tar.gz"
+            assert parts[1].lstrip("*") == f"openssl-{version}.tar.gz"
         if verbose:
             print("got sha256:", sha256)
         return sha256