From 807bb95058db44df51b026a95cb96b2c28ebb97a Mon Sep 17 00:00:00 2001
From: Khoi Pham <dkpham@amazon.com>
Date: Tue, 6 Aug 2024 09:49:46 -0700
Subject: [PATCH] chore: Upgrade to OpenSSL 3.3.1 for SAM CLI Installer

---
 installer/pyinstaller/build-linux.sh | 7 ++++---
 installer/pyinstaller/build-mac.sh   | 2 +-
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/installer/pyinstaller/build-linux.sh b/installer/pyinstaller/build-linux.sh
index e2a3acefeb0..5fb3411e016 100755
--- a/installer/pyinstaller/build-linux.sh
+++ b/installer/pyinstaller/build-linux.sh
@@ -16,7 +16,7 @@ if [ "$python_version" = "" ]; then
 fi
 
 if [ "$openssl_version" = "" ]; then
-    openssl_version="1.1.1w";
+    openssl_version="3.0.14";
 fi
 
 if [ "$zlib_version" = "" ]; then
@@ -38,7 +38,7 @@ fi
 
 set -eux
 
-yum install -y libffi-devel
+yum install -y libffi-devel perl-IPC-Cmd
 
 echo "Making Folders"
 mkdir -p .build/src
@@ -49,11 +49,12 @@ mkdir -p .build/output/openssl
 cd .build/output/openssl
 
 echo "Building OpenSSL"
-curl -L "https://github.com/openssl/openssl/releases/download/OpenSSL_${openssl_version//./_}/openssl-${openssl_version}.tar.gz" --output openssl.tar.gz
+curl -L "https://github.com/openssl/openssl/releases/download/openssl-${openssl_version}/openssl-${openssl_version}.tar.gz" --output openssl.tar.gz
 tar xzf openssl.tar.gz
 cd openssl-${openssl_version}
 # install_sw installs OpenSSL without manual pages
 ./config --prefix=/opt/openssl && make -j8 && make -j8 install_sw
+ln -sf /opt/openssl/lib64 /opt/openssl/lib
 cd ../../
 
 echo "Building zlib"
diff --git a/installer/pyinstaller/build-mac.sh b/installer/pyinstaller/build-mac.sh
index 9e64029fa22..faf89926edb 100755
--- a/installer/pyinstaller/build-mac.sh
+++ b/installer/pyinstaller/build-mac.sh
@@ -30,7 +30,7 @@ if [ "$python_library_zip_filename" = "" ]; then
 fi
 
 if [ "$openssl_version" = "" ]; then
-    openssl_version="1.1.1w";
+    openssl_version="3.0.14";
 fi
 
 if [ "$python_version" = "" ]; then