Test that all supported TLS ciphers actually work. Establish

connections between client and server implemented with LibreSSL or
OpenSSL with a fixed cipher on each side.  Check the used cipher
in the session print out.

1 files changed, 7 insertions, 1 deletions

diff --git a/src/regress/lib/libssl/interop/cert/Makefile b/src/regress/lib/libssl/interop/cert/Makefile
index 3e7a07cdfe..11bc4aa2ab 100644
--- a/src/regress/lib/libssl/interop/cert/Makefile
+++ b/src/regress/lib/libssl/interop/cert/Makefile
@@ -1,4 +1,10 @@
-# $OpenBSD: Makefile,v 1.3 2018/11/11 07:39:34 bluhm Exp $
+# $OpenBSD: Makefile,v 1.4 2019/02/21 23:06:33 bluhm Exp $
+
+# Connect a client to a server.  Both can be current libressl, or
+# openssl 1.0.2, or openssl 1.1.  Create client and server certificates
+# that are signed by a CA and not signed by a fake CA.  Try all
+# combinations with, without, and with wrong CA for client and server
+# and check the result of certificate verification.
 
 LIBRARIES =             libressl
 .if exists(/usr/local/bin/eopenssl)