libcrypto regress: add interop harness for openssl/3.5

1 files changed, 8 insertions, 3 deletions

diff --git a/src/regress/lib/libssl/interop/cipher/Makefile b/src/regress/lib/libssl/interop/cipher/Makefile
index fa7e25f9ee..6693b962d0 100644
--- a/src/regress/lib/libssl/interop/cipher/Makefile
+++ b/src/regress/lib/libssl/interop/cipher/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.17 2025/01/15 10:54:17 tb Exp $
+# $OpenBSD: Makefile,v 1.18 2025/07/09 17:48:02 tb Exp $
 
 # Connect a client to a server.  Both can be current libressl, or
 # openssl 1.1 or 3.0.  Create lists of supported ciphers
@@ -13,6 +13,9 @@ LIBRARIES +=		openssl33
 .if exists(/usr/local/bin/eopenssl34)
 LIBRARIES +=            openssl34
 .endif
+.if exists(/usr/local/bin/eopenssl35)
+LIBRARIES +=            openssl35
+.endif
 
 CLEANFILES =    *.tmp *.ciphers ciphers.mk
 
@@ -42,7 +45,8 @@ client-${clib}-server-${slib}.ciphers: \
         # we are only interested in ciphers supported by libressl
         sort $@ client-libressl.ciphers >$@.tmp
 . if "${clib}" == "openssl33" || "${slib}" == "openssl33" || \
-        "${clib}" == "openssl34" || "${slib}" == "openssl34"
+        "${clib}" == "openssl34" || "${slib}" == "openssl34" || \
+        "${clib}" == "openssl35" || "${slib}" == "openssl35"
         # OpenSSL's SSL_CTX_set_cipher_list doesn't accept TLSv1.3 ciphers
         sed -i '/^TLS_/d' $@.tmp
 . endif
@@ -72,6 +76,7 @@ regress: ciphers.mk
 LEVEL_libressl =
 LEVEL_openssl33 = ,@SECLEVEL=0
 LEVEL_openssl34 = ,@SECLEVEL=0
+LEVEL_openssl35 = ,@SECLEVEL=0
 
 .for clib in ${LIBRARIES}
 .for slib in ${LIBRARIES}
@@ -132,7 +137,7 @@ check-cipher-${cipher}-client-${clib}-server-${slib}: \
 . endif
 . if "${clib}" == "libressl"
         # libressl client may prefer chacha-poly if aes-ni is not supported
-.  if "${slib}" == "openssl33" || "${slib}" == "openssl34"
+.  if "${slib}" == "openssl33" || "${slib}" == "openssl34" || "${slib}" == "openssl35"
         egrep -q ' Cipher *: TLS_(AES_256_GCM_SHA384|CHACHA20_POLY1305_SHA256)$$' ${@:S/^check/server/}.out
 .  else
         egrep -q ' Cipher *: TLS_(AES_256_GCM_SHA384|CHACHA20_POLY1305_SHA256)$$' ${@:S/^check/server/}.out