1 files changed, 9 insertions, 3 deletions

diff --git a/src/regress/lib/libssl/interop/cipher/Makefile b/src/regress/lib/libssl/interop/cipher/Makefile
index 3a116d5ed5..70eaeec44c 100644
--- a/src/regress/lib/libssl/interop/cipher/Makefile
+++ b/src/regress/lib/libssl/interop/cipher/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.14 2024/02/03 15:58:34 beck Exp $
+# $OpenBSD: Makefile,v 1.15 2024/08/18 09:14:17 tb Exp $
 
 # Connect a client to a server.  Both can be current libressl, or
 # openssl 1.1 or 3.0.  Create lists of supported ciphers
@@ -16,6 +16,9 @@ LIBRARIES +=		openssl30
 .if exists(/usr/local/bin/eopenssl31)
 LIBRARIES +=            openssl31
 .endif
+.if exists(/usr/local/bin/eopenssl32)
+LIBRARIES +=            openssl32
+.endif
 
 CLEANFILES =    *.tmp *.ciphers ciphers.mk
 
@@ -46,7 +49,8 @@ client-${clib}-server-${slib}.ciphers: \
         sort $@ client-libressl.ciphers >$@.tmp
 . if "${clib}" == "openssl11" || "${slib}" == "openssl11" || \
         "${clib}" == "openssl30" || "${slib}" == "openssl30" || \
-        "${clib}" == "openssl31" || "${slib}" == "openssl31"
+        "${clib}" == "openssl31" || "${slib}" == "openssl31" || \
+        "${clib}" == "openssl32" || "${slib}" == "openssl32"
         # OpenSSL's SSL_CTX_set_cipher_list doesn't accept TLSv1.3 ciphers
         sed -i '/^TLS_/d' $@.tmp
 . endif
@@ -76,6 +80,8 @@ regress: ciphers.mk
 LEVEL_libressl =
 LEVEL_openssl11 = ,@SECLEVEL=0
 LEVEL_openssl30 = ,@SECLEVEL=0
+LEVEL_openssl31 = ,@SECLEVEL=0
+LEVEL_openssl32 = ,@SECLEVEL=0
 
 .for clib in ${LIBRARIES}
 .for slib in ${LIBRARIES}
@@ -136,7 +142,7 @@ check-cipher-${cipher}-client-${clib}-server-${slib}: \
 . endif
 . if "${clib}" == "libressl"
         # libressl client may prefer chacha-poly if aes-ni is not supported
-.  if "${slib}" == "openssl11" || "${slib}" == "openssl30" || "${slib}" == "openssl31"
+.  if "${slib}" == "openssl11" || "${slib}" == "openssl30" || "${slib}" == "openssl31" || "${slib}" == "openssl32"
         egrep -q ' Cipher *: TLS_(AES_256_GCM_SHA384|CHACHA20_POLY1305_SHA256)$$' ${@:S/^check/server/}.out
 .  else
         egrep -q ' Cipher *: TLS_(AES_256_GCM_SHA384|CHACHA20_POLY1305_SHA256)$$' ${@:S/^check/server/}.out