Merge branch 'blender-v4.0-release'

build_files/build_environment/cmake/ssl.cmake

@@ -37,16 +37,14 @@ else()
     PREFIX ${BUILD_DIR}/ssl
     CONFIGURE_COMMAND ${CONFIGURE_ENV} && cd ${BUILD_DIR}/ssl/src/external_ssl/ && ${SSL_CONFIGURE_COMMAND} --prefix=${LIBDIR}/ssl
       --openssldir=${LIBDIR}/ssl
-      # Without this: Python will use the build directories:
-      # To see these values in use, check the output of `ssl.get_default_verify_paths()`.
-      # This definition causes the following values to be set:
-      # - `capath='/etc/ssl/certs'`
-      # - `openssl_cafile='/etc/ssl/cert.pem'`
-      # - `openssl_capath='/etc/ssl/certs'`
-      # Note that the output from the command `openssl info -configdir` on the users system
-      # would be ideal but this is more involved.
+      # Without this: Python will use the build directories.
+      # using the system directory `/etc/ssl` might seem the obvious choice,
+      # there is no guarantee the version of SSL used with Blender is compatible with the systems,
+      # where changes to the SSL configuration format can cause SSL not to load (see #114452).
+      # So reference a directory known not to exist. Ideally Blender could distribute it's own SSL
+      # directory, but this isn't compatible with hard coded paths.
       # See #111132 & https://github.com/openssl/openssl/issues/20185 for details.
-      -DOPENSSLDIR=\\"/etc/ssl\\"
+      -DOPENSSLDIR=\\"/dev/null\\"
       no-shared
       no-idea no-mdc2 no-rc5 no-zlib no-ssl3 enable-unit-test no-ssl3-method enable-rfc3779 enable-cms
       --config=${CMAKE_CURRENT_SOURCE_DIR}/cmake/ssl.conf