openbsd/src/regress/lib/libssl/interop/Makefile, branch OPENBSD_7_4A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_42023-02-01T14:39:09+00:00Retire OpenSSL 1.0.2 interop2023-02-01T14:39:09+00:00tb2023-02-01T14:39:09+00:00urn:sha1:17e85e0d750477ecd6d94c4da3d089193c536e8f
Now that the OpenSSL 1.0.2 port is gone, there's no need to keep the
interop tests anymore. anton's and bluhm's regress tests will switch
to testing interoperability with OpenSSL 3.0.
Add openssl 3.0 interop tests2023-01-27T08:28:36+00:00tb2023-01-27T08:28:36+00:00urn:sha1:971c759a469620704a18f7c93e7d71fbae75e7c2
The plan is to retire the 1.0.2 interop tests soon so as to be able to
drop the dead and dangerous OpenSSL 1.0.2 port.
The cert part is extremely slow on arm64: the whole interop test on an m1
is about 10x slower (~45 min!) than on a modern amd64 laptop, so people
running regress may want to wait a bit with adding OpenSSL 3 to their test
boxes until this is sorted out.
Revert accidental commit2021-08-30T17:34:02+00:00tb2021-08-30T17:34:02+00:00urn:sha1:e501ef18aa9f692de97c6b92c6bfabf63c669322link verify regress tests to build2021-08-30T17:28:47+00:00tb2021-08-30T17:28:47+00:00urn:sha1:ed1026f341a36f6824b8a5991147f9467392ce3a1) Move the interop tests to the end so we see tlsfuzzer first2020-09-21T15:13:24+00:00beck2020-09-21T15:13:24+00:00urn:sha1:9d558960cf920187dcf488f05a3decde546bbddc
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf
ok jsing@
Test botan TLS client with libressl, openssl, openssl11 server.2020-09-15T01:45:16+00:00bluhm2020-09-15T01:45:16+00:00urn:sha1:99c305e9a1574d8ffff5ba4752c88b964c0fafbdConnect a client to a server. Both can be current libressl, or2020-09-14T00:51:04+00:00bluhm2020-09-14T00:51:04+00:00urn:sha1:407ed00262824449401bb81ab8981bc63ea02280
openssl 1.0.2, or openssl 1.1. Pin client or server to a fixed TLS
version number. Incompatible versions must fail. Check that client
and server have used correct version by grepping in their session
print out.
Enable cert and cipher interop tests. cert just works. cipher has2020-09-11T22:48:00+00:00bluhm2020-09-11T22:48:00+00:00urn:sha1:66b3b0fa0e26b882333bdd906d8811b1f4094144
been fixed to work with libressl TLS 1.3. Both libressl and openssl11
replace obsolete TLS 1.2 ciphers with AEAD-AES256-GCM-SHA384 or
TLS_AES_256_GCM_SHA384 in TLS 1.3 respectively. The test expects
that now. Currently GOST does not work with libressl and TLS 1.3
and is disabled.
Disable cert interop tests for now.2020-01-25T16:10:32+00:00jsing2020-01-25T16:10:32+00:00urn:sha1:7d21cbd7f1e56eb8ddf1d70461ed852a17e87e91
The libressl TLSv1.3 client and server currently lack client certificate
authentication support and this test expects all clients can auth with
all servers.
We can likely turn this back on in the near future.
Actually disable cipher interop tests.2020-01-25T16:09:05+00:00jsing2020-01-25T16:09:05+00:00urn:sha1:2de79ce59f152afc2bd7f8ebf2d6e99265f6df6f