Update SymCrypt-OpenSSL to 1.11.0

[mamckee]

This PR updates the SymCrypt-OpenSSL package to 1.11.0. 1.11.x is the planned supported release for AZL4 and includes updates for OpenSSL 3.5 and PQC (ML-DSA and ML-KEM) algorithms.

The changes were tested locally using an AZL4 test image.

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[github-actions]

Hello, and thank you for opening this pull request! 👋🏼 We appreciate the contribution.

We require pull request titles to follow the Conventional Commits specification and it looks like your proposed title needs to be adjusted.

Commits in this repo will typically be prefixed with fix:, feat:, docs:, chore:, refactor:, test:, or ci: to indicate the type of change being proposed. The linked specification has more details.

Details:

No release type found in pull request title "Update SymCrypt-OpenSSL to 1.11.0". Add a prefix to indicate what kind of release this pull request corresponds to. For reference, see https://www.conventionalcommits.org/

Available types:
 - feat: A new feature
 - fix: A bug fix
 - docs: Documentation only changes
 - style: Changes that do not affect the meaning of the code (white-space, formatting, missing semi-colons, etc)
 - refactor: A code change that neither fixes a bug nor adds a feature
 - perf: A code change that improves performance
 - test: Adding missing tests or correcting existing tests
 - build: Changes that affect the build system or external dependencies (example scopes: gulp, broccoli, npm)
 - ci: Changes to our CI configuration files and scripts (example scopes: Travis, Circle, BrowserStack, SauceLabs)
 - chore: Other changes that don't modify src or test files
 - revert: Reverts a previous commit

[Copilot]

Pull request overview

Updates SymCrypt-OpenSSL to 1.11.0 and its SymCrypt dependency to 103.12.1 for OpenSSL 3.5 and PQC support.

Changes:

• Refreshes component versions, sources, and lock fingerprints.
• Removes three obsolete downstream patches.
• Updates SslPlay test paths and SHA-1 test configuration.

Reviewed changes

Copilot reviewed 19 out of 21 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
base/comps/SymCrypt/SymCrypt.spec	Bumps SymCrypt version.
base/comps/SymCrypt/SymCrypt.comp.toml	Updates SymCrypt source metadata.
base/comps/SymCrypt/symcrypt-build-environment-variables-v103.12.1.sh	Adds new build metadata.
base/comps/SymCrypt/symcrypt-build-environment-variables-v103.11.0.sh	Removes old build metadata.
base/comps/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec	Bumps SCOSSL and updates tests.
base/comps/SymCrypt-OpenSSL/SymCrypt-OpenSSL.comp.toml	Updates SCOSSL source metadata.
base/comps/SymCrypt-OpenSSL/changelog	Adds release entry.
base/comps/SymCrypt-OpenSSL/0001-register-symcrypt-provider-for-config-drop-in.patch	Removes upstreamed patch.
base/comps/SymCrypt-OpenSSL/0002-skip-sha1-signature-tests-disabled-by-crypto-policy.patch	Removes obsolete test patch.
base/comps/SymCrypt-OpenSSL/0003-bump-project-version-to-match-release-tag.patch	Removes version workaround.
locks/SymCrypt.lock	Refreshes input fingerprint.
locks/SymCrypt-OpenSSL.lock	Refreshes input fingerprint.
specs/s/SymCrypt/SymCrypt.spec	Updates rendered SymCrypt spec.
specs/s/SymCrypt/symcrypt-build-environment-variables-v103.12.1.sh	Adds rendered build metadata.
specs/s/SymCrypt/symcrypt-build-environment-variables-v103.11.0.sh	Removes old rendered metadata.
specs/s/SymCrypt/sources	Updates rendered source checksum.
specs/s/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec	Updates rendered SCOSSL spec.
specs/s/SymCrypt-OpenSSL/sources	Updates rendered source checksum.
specs/s/SymCrypt-OpenSSL/0001-register-symcrypt-provider-for-config-drop-in.patch	Removes rendered patch.
specs/s/SymCrypt-OpenSSL/0002-skip-sha1-signature-tests-disabled-by-crypto-policy.patch	Removes rendered patch.
specs/s/SymCrypt-OpenSSL/0003-bump-project-version-to-match-release-tag.patch	Removes rendered patch.

[github-actions]

📄❌ Rendered specs are out of date

FIX: — run this and commit the result:

azldev component render SymCrypt-OpenSSL

Or download the fix patch and apply it:

gh run download 29457771877 -R microsoft/azurelinux -n rendered-specs-patch
git apply rendered-specs.patch

Category	Count
Content diffs	1
Extra files (untracked)	0
Missing files (deleted)	0

Content diffs

`specs/s/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec`

--- committed/specs/s/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec
+++ rendered/specs/s/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec
@@ -2,7 +2,7 @@
 ## (rpmautospec version 0.8.3)
 ## RPMAUTOSPEC: autorelease, autochangelog
 %define autorelease(e:s:pb:n) %{?-p:0.}%{lua:
-    release_number = 2;
+    release_number = 3;
     base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}"));
     print(release_number + base_release_number - 1);
 }%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}}
@@ -105,6 +105,9 @@
 
 %changelog
 ## START: Generated by rpmautospec
+* Wed Jul 15 2026 Maxwell Moyer-McKee <mamckee@microsoft.com> - 1.11.0-3
+- Update SymCrypt-OpenSSL to v1.11.0
+
 * Fri Jun 26 2026 Tobias Brick <tobiasb@microsoft.com> - 1.11.0-2
 - feat(SymCrypt-OpenSSL): onboard SymCrypt-OpenSSL to Azure Linux 4.0