From 75a32b99dda20a7bf3a8836956734c9561dcd3c7 Mon Sep 17 00:00:00 2001 From: Norm Johanson Date: Tue, 1 Sep 2026 11:24:23 -0700 Subject: [PATCH] Revert PGC out-out mechanism in bootstrap script --- .../src/Amazon.Lambda.RuntimeSupport/bootstrap.net8.sh | 7 ------- Libraries/src/Amazon.Lambda.RuntimeSupport/bootstrap.sh | 7 ------- 2 files changed, 14 deletions(-) diff --git a/Libraries/src/Amazon.Lambda.RuntimeSupport/bootstrap.net8.sh b/Libraries/src/Amazon.Lambda.RuntimeSupport/bootstrap.net8.sh index a722236a4..9dc77ab3a 100644 --- a/Libraries/src/Amazon.Lambda.RuntimeSupport/bootstrap.net8.sh +++ b/Libraries/src/Amazon.Lambda.RuntimeSupport/bootstrap.net8.sh @@ -1,12 +1,5 @@ #!/bin/bash -# PQC TLS keyshares are enabled by default via the AL2023 base-OS crypto policy. Customers can opt -# out by setting AWS_LAMBDA_DISABLE_PQC_KEYSHARES (presence-based, including an empty value), which -# selects the shipped classical-only openssl_non_pqc.cnf and takes precedence over a customer OPENSSL_CONF. -if [ -n "${AWS_LAMBDA_DISABLE_PQC_KEYSHARES+x}" ]; then - export OPENSSL_CONF=/var/runtime/openssl_conf/openssl_non_pqc.cnf -fi - # .NET on Linux uses OpenSSL to handle certificates. The .NET runtime will load the certs by first reading # the default cert bundle file which can be overriden by the SSL_CERT_FILE env var. Then it will load the # certs in the default cert directory which can be overriden by the SSL_CERT_DIR env var. On AL2023 diff --git a/Libraries/src/Amazon.Lambda.RuntimeSupport/bootstrap.sh b/Libraries/src/Amazon.Lambda.RuntimeSupport/bootstrap.sh index 6352d95c2..2c4a517f9 100644 --- a/Libraries/src/Amazon.Lambda.RuntimeSupport/bootstrap.sh +++ b/Libraries/src/Amazon.Lambda.RuntimeSupport/bootstrap.sh @@ -1,12 +1,5 @@ #!/bin/bash -# PQC TLS keyshares are enabled by default via the AL2023 base-OS crypto policy. Customers can opt -# out by setting AWS_LAMBDA_DISABLE_PQC_KEYSHARES (presence-based, including an empty value), which -# selects the shipped classical-only openssl_non_pqc.cnf and takes precedence over a customer OPENSSL_CONF. -if [ -n "${AWS_LAMBDA_DISABLE_PQC_KEYSHARES+x}" ]; then - export OPENSSL_CONF=/var/runtime/openssl_conf/openssl_non_pqc.cnf -fi - # This script is used to locate 2 files in the /var/task folder, where the end-user assembly is located # The 2 files are .deps.json and .runtimeconfig.json # These files are used to add the end-user assembly into context and make the code reachable to the dotnet process