1 files changed, 43 insertions, 0 deletions

diff --git a/src/regress/lib/libssl/interop/openssl31/Makefile b/src/regress/lib/libssl/interop/openssl31/Makefile
new file mode 100644
index 0000000000..8f35fa272f
--- /dev/null
+++ b/src/regress/lib/libssl/interop/openssl31/Makefile
@@ -0,0 +1,43 @@
+# $OpenBSD: Makefile,v 1.1 2023/10/30 17:15:21 tb Exp $
+
+.if !exists(/usr/local/bin/eopenssl31)
+regress:
+        # install openssl-3.1 from ports for interop tests
+        @echo 'Run "pkg_add openssl--%3.1" to run tests against OpenSSL 3.1'
+        @echo SKIPPED
+.else
+
+PROGS =                 client server
+CPPFLAGS =              -I /usr/local/include/eopenssl31
+LDFLAGS =               -L /usr/local/lib/eopenssl31
+LDADD =                 -lssl -lcrypto
+DPADD =                 /usr/local/lib/eopenssl31/libssl.a \
+                        /usr/local/lib/eopenssl31/libcrypto.a
+LD_LIBRARY_PATH =       /usr/local/lib/eopenssl31
+REGRESS_TARGETS =       run-self-client-server
+.for p in ${PROGS}
+REGRESS_TARGETS +=      run-ldd-$p run-version-$p run-protocol-$p
+.endfor
+
+.for p in ${PROGS}
+
+run-ldd-$p: ldd-$p.out
+        # check that $p is linked with OpenSSL 3.1
+        grep -q /usr/local/lib/eopenssl31/libcrypto.so ldd-$p.out
+        grep -q /usr/local/lib/eopenssl31/libssl.so ldd-$p.out
+        # check that $p is not linked with LibreSSL
+        ! grep -v libc.so ldd-$p.out | grep /usr/lib/
+
+run-version-$p: $p-self.out
+        # check that runtime version is OpenSSL 3.1
+        grep 'SSLEAY_VERSION: OpenSSL 3.1' $p-self.out
+
+run-protocol-$p: $p-self.out
+        # check that OpenSSL 3.1 protocol version is TLS 1.3
+        grep 'Protocol *: TLSv1.3' $p-self.out
+
+.endfor
+
+.endif # exists(/usr/local/bin/eopenssl31)
+
+.include <bsd.regress.mk>