openssl-nginx 3.5.6

Version 3.5.6 — 2026-05-10

Changes

• PACKAGING FIX (2026-05-10):

– Add GCC 10 compatibility: automatically strip -fzero-call-used-regs flag
for older compilers (flag introduced in GCC 11, unsupported in GCC 10/9)
– Exclude libssl-nginx and libcrypto-nginx from dh_shlibdeps dependency
resolution (these are custom OpenSSL libraries, not system packages)

• SONAME FIX:

– Rename OpenSSL library SOMAMEs to nginx-specific names for isolation
– Prevents conflicts with system OpenSSL libraries

• Core Library Features:

– A dedicated OpenSSL Library for NGINX/Angie
– with OpenResty cb_yield_patch
– Enabled ec_nistp_64_gcc_128 – Faster elliptic curve math on 64-bit
– Enable RDRAND hardware random number generation for better entropy performance
– Enable kernel TLS (kTLS) offload support for improved nginx/angie performance
– Removed TLS record compression (zstd/zlib) – deprecated in TLS 1.3, nginx has own compression
– Removed binaries/docs/manpages/etc for a clean library.
– Removed: RFC3779 (routing certs) CMS (email signing) FIPS (reduces overhead, not needed for nginx)

Distributions

• bookworm
• jammy
• noble
• resolute
• trixie