Matt Caswell

What is the status of this PR? Also, will this additionally fix #22203?

> I do believe this PR addresses both. On that basis I've added the "severity: important" label to this PR.

This seems about right to me.

> the entire config is loaded, and then spat out via CLI which can then be parsed / grepped for the relavant information. OpenSSL will have the equivalent capability in...

This does not look like it qualifies for "CLA: trivial". Please can you submit a CLA for this: https://www.openssl.org/policies/cla.html

FYI #27776 has now been merged to the feature/ech branch.

Hmmm....CI check on Windows is failing

Fine by me too.

OpenSSL 3.1 is out of support and no longer receiving bug fixes. I'm fairly sure there have been fixes in the RAND code, so I would suggest upgrading to a...

> Since the upgrade to 3.5 might take some time for us, would it be advisable to apply any patch fixes on this? I would not advise backporting any patches...