[AUTOPATCHER-CORE] Upgrade SymCrypt-OpenSSL to 1.9.0 Support digest state exports. (#13870)

Co-authored-by: Tobias Brick <tobiasb@microsoft.com>

Author: CBL-Mariner-Bot

SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.signatures.json

@@ -1,5 +1,5 @@
 {
   "Signatures": {
-    "SymCrypt-OpenSSL-1.8.1.tar.gz": "292d9eb2e9874abd250aff2715623ccaa1bd51c470a7c5af1bbd7678383372df"
+    "SymCrypt-OpenSSL-1.9.0.tar.gz": "073debf1d12d9d4c683bf4ba6bd78403c9f559244f06b7e1c6de46bd483c0ff3"
   }
 }

SPECS/SymCrypt-OpenSSL/SymCrypt-OpenSSL.spec

@@ -1,6 +1,6 @@
 Summary:        The SymCrypt engine for OpenSSL (SCOSSL) allows the use of OpenSSL with SymCrypt as the provider for core cryptographic operations
 Name:           SymCrypt-OpenSSL
-Version:        1.8.1
+Version:        1.9.0
 Release:        1%{?dist}
 License:        MIT
 Vendor:         Microsoft Corporation
@@ -59,7 +59,14 @@ install SymCryptEngine/inc/e_scossl.h %{buildroot}%{_includedir}/e_scossl.h
 install SymCryptProvider/symcrypt_prov.cnf %{buildroot}%{_sysconfdir}/pki/tls/symcrypt_prov.cnf
 
 %check
-./bin/SslPlay/SslPlay
+# Run in a subshell so the exit code of the test does not affect the main shell's exit code.
+# This is important because the entire section is wrapped in a script by rpmbuild itself.
+# The test is run twice: once with the default provider and once with the SymCrypt provider.
+(
+        set -e
+        ./bin/SslPlay/SslPlay
+        ./bin/SslPlay/SslPlay --provider-path ./bin/SymCryptProvider/ --provider symcryptprovider --no-engine
+)
 
 %files
 %license LICENSE
@@ -80,6 +87,10 @@ install SymCryptProvider/symcrypt_prov.cnf %{buildroot}%{_sysconfdir}/pki/tls/sy
 %dir %attr(1733, root, root) %{_localstatedir}/log/keysinuse/
 
 %changelog
+* Wed Jun 11 2025 Tobias Brick <tobiasb@microsoft.com> - 1.9.0-1
+- Auto-upgrade to 1.9.0 - Support digest state exports.
+- Added second test run that forces the use of the SymCrypt provider.
+
 * Tue May 13 2025 Tobias Brick <tobiasb@microsoft.com> - 1.8.1-1
 - Upgrade to SymCrypt-OpenSSL 1.8.1 with minor bugfixes.
 

cgmanifest.json

@@ -28606,8 +28606,8 @@
         "type": "other",
         "other": {
           "name": "SymCrypt-OpenSSL",
-          "version": "1.8.1",
-          "downloadUrl": "https://github.com/microsoft/SymCrypt-OpenSSL/archive/v1.8.1.tar.gz"
+          "version": "1.9.0",
+          "downloadUrl": "https://github.com/microsoft/SymCrypt-OpenSSL/archive/v1.9.0.tar.gz"
         }
       }
     },