openbsd/src/regress/lib/libssl/interop/version, branch OPENBSD_7_3 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_3 2023-02-01T14:39:09+00:00 Retire OpenSSL 1.0.2 interop 2023-02-01T14:39:09+00:00 tb 2023-02-01T14:39:09+00:00 urn:sha1:17e85e0d750477ecd6d94c4da3d089193c536e8f Now that the OpenSSL 1.0.2 port is gone, there's no need to keep the interop tests anymore. anton's and bluhm's regress tests will switch to testing interoperability with OpenSSL 3.0. Add openssl 3.0 interop tests 2023-01-27T08:28:36+00:00 tb 2023-01-27T08:28:36+00:00 urn:sha1:971c759a469620704a18f7c93e7d71fbae75e7c2 The plan is to retire the 1.0.2 interop tests soon so as to be able to drop the dead and dangerous OpenSSL 1.0.2 port. The cert part is extremely slow on arm64: the whole interop test on an m1 is about 10x slower (~45 min!) than on a modern amd64 laptop, so people running regress may want to wait a bit with adding OpenSSL 3 to their test boxes until this is sorted out. Remove echo headlines. 2020-12-17T00:51:12+00:00 bluhm 2020-12-17T00:51:12+00:00 urn:sha1:c7cbfcf2a0ad5dc204129e5fbf99dd57cc33e72a 1) Move the interop tests to the end so we see tlsfuzzer first 2020-09-21T15:13:24+00:00 beck 2020-09-21T15:13:24+00:00 urn:sha1:9d558960cf920187dcf488f05a3decde546bbddc 2) Reorder the interop tests so the really slow "cert" test is at the end 3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination of client and server that does not involve libressl. This way we can skip testing openssl to openssl11 when running these manually by setting REGRESS_SKIP_SLOW to "yet" in mk.conf ok jsing@ Connect a client to a server. Both can be current libressl, or 2020-09-14T00:51:04+00:00 bluhm 2020-09-14T00:51:04+00:00 urn:sha1:407ed00262824449401bb81ab8981bc63ea02280 openssl 1.0.2, or openssl 1.1. Pin client or server to a fixed TLS version number. Incompatible versions must fail. Check that client and server have used correct version by grepping in their session print out.