Right now we publish the version of OpenSSL we compile against to customers. The hybrid scons-bazel build system is going to have both components in Bazel and components in SCons that depend on OpenSSL.

We build the Bazel components in a containerized environment; this environment may have a different version of OpenSSL compared with the host environment SCons compilation is using.

We want to use the system versions of OpenSSL and not compile our own, so we need to leverage the container's package management system to install the correct version of OpenSSL. The container definitions live here: https://github.com/mongodb/mongo/blob/master/bazel/remote_execution_container/ubuntu24/dockerfile

Once this is in place, we need a check to verify that the version of OpenSSL in SCons matches the version of OpenSSL in Bazel. This could be accomplished somewhere around here: https://github.com/mongodb/mongo/blob/master/SConstruct#L5162 The build should fail if there's a mismatch.

Another place we have compiler checks: https://github.com/mongodb/mongo/blob/master/bazel/config/generate_config_header.py

Container generation script: https://github.com/mongodb/mongo/blob/master/bazel/platforms/remote_execution_containers_generator.py