Add support for OpenSSL 3.1 interop tests

Until OpenSSL 3.1 has replaced OpenSSL 3.0 on most architectures, run
both tests. Installed packages of OpenSSL 3.0 will update automatically
to 3.1, so regress runners should not need to do anything.

1 files changed, 43 insertions, 0 deletions

diff --git a/src/regress/lib/libssl/interop/openssl31/Makefile b/src/regress/lib/libssl/interop/openssl31/Makefile
new file mode 100644
index 0000000000..8f35fa272f
--- /dev/null
+++ b/src/regress/lib/libssl/interop/openssl31/Makefile
@@ -0,0 +1,43 @@
+# $OpenBSD: Makefile,v 1.1 2023/10/30 17:15:21 tb Exp $
+
+.if !exists(/usr/local/bin/eopenssl31)
+regress:
+        # install openssl-3.1 from ports for interop tests
+        @echo 'Run "pkg_add openssl--%3.1" to run tests against OpenSSL 3.1'
+        @echo SKIPPED
+.else
+
+PROGS =                 client server
+CPPFLAGS =              -I /usr/local/include/eopenssl31
+LDFLAGS =               -L /usr/local/lib/eopenssl31
+LDADD =                 -lssl -lcrypto
+DPADD =                 /usr/local/lib/eopenssl31/libssl.a \
+                        /usr/local/lib/eopenssl31/libcrypto.a
+LD_LIBRARY_PATH =       /usr/local/lib/eopenssl31
+REGRESS_TARGETS =       run-self-client-server
+.for p in ${PROGS}
+REGRESS_TARGETS +=      run-ldd-$p run-version-$p run-protocol-$p
+.endfor
+
+.for p in ${PROGS}
+
+run-ldd-$p: ldd-$p.out
+        # check that $p is linked with OpenSSL 3.1
+        grep -q /usr/local/lib/eopenssl31/libcrypto.so ldd-$p.out
+        grep -q /usr/local/lib/eopenssl31/libssl.so ldd-$p.out
+        # check that $p is not linked with LibreSSL
+        ! grep -v libc.so ldd-$p.out | grep /usr/lib/
+
+run-version-$p: $p-self.out
+        # check that runtime version is OpenSSL 3.1
+        grep 'SSLEAY_VERSION: OpenSSL 3.1' $p-self.out
+
+run-protocol-$p: $p-self.out
+        # check that OpenSSL 3.1 protocol version is TLS 1.3
+        grep 'Protocol *: TLSv1.3' $p-self.out
+
+.endfor
+
+.endif # exists(/usr/local/bin/eopenssl31)
+
+.include <bsd.regress.mk>