[nodejs-github-bot]

This is an automated update of OpenSSL to 4.1.0 for openssl-updater-4.1.

[nodejs-github-bot]

Review requested:

• @nodejs/security-wg

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/78600/

[panva]

one new test failure needs accounting for a changed error code which we'll do in the actual update PR

---
duration_ms: 147.383
exitcode: 1
severity: fail
stack: |-
  node:internal/assert/utils:146
    throw error;
    ^

  AssertionError [ERR_ASSERTION]: Expected values to be strictly equal:
  + actual - expected

  + 'ERR_SSL_BAD_DECRYPT'
  - 'ERR_SSL_DECRYPTION_FAILED_OR_BAD_RECORD_MAC'
             ^

      at TLSSocket.<anonymous> (/home/iojs/build/workspace/node-test-commit-plinux/nodes/rhel10-ppc64le/test/parallel/test-tls-coalesce-records.js:120:16)
      at TLSSocket.<anonymous> (/home/iojs/build/workspace/node-test-commit-plinux/nodes/rhel10-ppc64le/test/common/index.js:512:15)
      at TLSSocket.emit (node:events:514:20)
      at TLSSocket._emitTLSError (node:internal/tls/wrap:1173:10)
      at TLSWrap.onerror (node:internal/tls/wrap:592:11) {
    generatedMessage: true,
    code: 'ERR_ASSERTION',
    actual: 'ERR_SSL_BAD_DECRYPT',
    expected: 'ERR_SSL_DECRYPTION_FAILED_OR_BAD_RECORD_MAC',
    operator: 'strictEqual',
    diff: 'simple'
  }

  Node.js v27.0.0-pre
...

[richardlau]

one new test failure needs accounting for a changed error code which we'll do in the actual update PR

@panva Might be preferable to fix the test separately in a cherry-pickable/backport-able PR. We wouldn't land the OpenSSL 4.1 update PR in Node.js 26, 24, 22 but we might land OpenSSL 4.1 compatibility patches for anyone doing their own builds (e.g. against shared openssl 4.1).

[panva]

one new test failure needs accounting for a changed error code which we'll do in the actual update PR

@panva Might be preferable to fix the test separately in a cherry-pickable/backport-able PR. We wouldn't land the OpenSSL 4.1 update PR in Node.js 26, 24, 22 but we might land OpenSSL 4.1 compatibility patches for anyone doing their own builds (e.g. against shared openssl 4.1).

#66962