Build provenance of openssl-bin-3.5.7 for CPython 3.14.6 on Windows

Core Development
1

Hello,

I’m trying to establish the build provenance and configuration of the Windows x64 OpenSSL binaries used by CPython 3.14.6.

CPython 3.14.6 selects the openssl-bin-3.5.7 branch from python/cpython-bin-deps. I found the OpenSSL build recipe in PCbuild/openssl.vcxproj, but I have not been able to establish that this exact recipe produced the prebuilt binaries in that branch.

Could you please point me to the authoritative build record or metadata for these binaries? Specifically:

  1. Which immutable cpython-bin-deps commit identifies the Windows x64 binaries, and what build job/recipe produced them?
  2. What OpenSSL source revision, patches, and Configure arguments/effective configuration were used, particularly OPENSSLDIR, MODULESDIR, and automatic config-loading settings?
  3. With OpenSSL environment overrides absent, where would this build resolve its default configuration, if any?
  4. For ordinary SHA256 through CPython _hashlib, does this build require an external provider module? If so, what is its default provider directory?

Links to existing build records, commits, or configuration metadata would be completely sufficient; I’m not asking for a security assessment or a new build.

Thank you.

2

This is the build: https://dev.azure.com/Python/cpython/_build/results?buildId=171063&view=results

The sources are from GitHub - python/cpython-source-deps: Source for packages that the cpython build process depends on · GitHub and are tagged there as openssl-3.5.7 (you can see this under “Parameters” on the build).