Update dependency openssl/openssl to v3.5.1

[renovate]

This PR contains the following updates:

Package	Update	Change
openssl/openssl	minor	3.4.1 -> 3.5.1

---

Release Notes

openssl/openssl (openssl/openssl)

v3.5.1

Compare Source

• Fix x509 application adds trusted use instead of rejected use.

  Issue summary: Use of -addreject option with the openssl x509 application adds
  a trusted use instead of a rejected use for a certificate.

  Impact summary: If a user intends to make a trusted certificate rejected for
  a particular use it will be instead marked as trusted for that use.

  ([CVE-2025-4575])

  Tomas Mraz

• Aligned the behaviour of TLS and DTLS in the event of a no_renegotiation
  alert being received. Older versions of OpenSSL failed with DTLS if a
  no_renegotiation alert was received. All versions of OpenSSL do this for TLS.
  From 3.2 a bug was exposed that meant that DTLS ignored no_rengotiation. We
  have now restored the original behaviour and brought DTLS back into line with
  TLS.

  Matt Caswell

v3.5.0

Compare Source

• Fix x509 application adds trusted use instead of rejected use.

  Issue summary: Use of -addreject option with the openssl x509 application adds
  a trusted use instead of a rejected use for a certificate.

  Impact summary: If a user intends to make a trusted certificate rejected for
  a particular use it will be instead marked as trusted for that use.

  ([CVE-2025-4575])

  Tomas Mraz

• Aligned the behaviour of TLS and DTLS in the event of a no_renegotiation
  alert being received. Older versions of OpenSSL failed with DTLS if a
  no_renegotiation alert was received. All versions of OpenSSL do this for TLS.
  From 3.2 a bug was exposed that meant that DTLS ignored no_rengotiation. We
  have now restored the original behaviour and brought DTLS back into line with
  TLS.

  Matt Caswell

v3.4.2

Compare Source

• When displaying distinguished names in the openssl application escape control
  characters by default.

  Tomáš Mráz

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - "before 2am" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.