diff options
Diffstat (limited to 'src/regress/lib/libssl/interop')
-rw-r--r-- | src/regress/lib/libssl/interop/Makefile.inc | 15 | ||||
-rw-r--r-- | src/regress/lib/libssl/interop/cipher/Makefile | 15 |
2 files changed, 4 insertions, 26 deletions
diff --git a/src/regress/lib/libssl/interop/Makefile.inc b/src/regress/lib/libssl/interop/Makefile.inc index 4a66390cbd..fa22fb8514 100644 --- a/src/regress/lib/libssl/interop/Makefile.inc +++ b/src/regress/lib/libssl/interop/Makefile.inc | |||
@@ -1,4 +1,4 @@ | |||
1 | # $OpenBSD: Makefile.inc,v 1.9 2023/10/18 19:14:32 anton Exp $ | 1 | # $OpenBSD: Makefile.inc,v 1.10 2024/02/03 15:58:34 beck Exp $ |
2 | 2 | ||
3 | .PATH: ${.CURDIR}/.. | 3 | .PATH: ${.CURDIR}/.. |
4 | 4 | ||
@@ -39,7 +39,7 @@ run-self-client-server: client server 127.0.0.1.crt | |||
39 | CLEANFILES += 127.0.0.1.{crt,key} \ | 39 | CLEANFILES += 127.0.0.1.{crt,key} \ |
40 | ca.{crt,key,srl} fake-ca.{crt,key} \ | 40 | ca.{crt,key,srl} fake-ca.{crt,key} \ |
41 | {client,server}.{req,crt,key} \ | 41 | {client,server}.{req,crt,key} \ |
42 | {dsa,ec,gost,rsa}.{key,req,crt} \ | 42 | {dsa,ec,rsa}.{key,req,crt} \ |
43 | dh.param | 43 | dh.param |
44 | 44 | ||
45 | 127.0.0.1.crt: | 45 | 127.0.0.1.crt: |
@@ -70,10 +70,6 @@ dsa.key: | |||
70 | ec.key: | 70 | ec.key: |
71 | openssl ecparam -genkey -name secp256r1 -out $@ | 71 | openssl ecparam -genkey -name secp256r1 -out $@ |
72 | 72 | ||
73 | gost.key: | ||
74 | openssl genpkey -algorithm gost2001 \ | ||
75 | -pkeyopt paramset:A -pkeyopt dgst:md_gost94 -out $@ | ||
76 | |||
77 | rsa.key: | 73 | rsa.key: |
78 | openssl genrsa -out $@ 2048 | 74 | openssl genrsa -out $@ 2048 |
79 | 75 | ||
@@ -82,11 +78,6 @@ dsa.req ec.req rsa.req: ${@:R}.key | |||
82 | -subj /L=OpenBSD/O=tls-regress/OU=${@:R}/CN=localhost/ \ | 78 | -subj /L=OpenBSD/O=tls-regress/OU=${@:R}/CN=localhost/ \ |
83 | -nodes -key ${@:R}.key -out $@ | 79 | -nodes -key ${@:R}.key -out $@ |
84 | 80 | ||
85 | gost.req: ${@:R}.key | 81 | dsa.crt ec.crt rsa.crt: ca.crt ${@:R}.req |
86 | openssl req -batch -new -md_gost94 \ | ||
87 | -subj /L=OpenBSD/O=tls-regress/OU=${@:R}/CN=localhost/ \ | ||
88 | -nodes -key ${@:R}.key -out $@ | ||
89 | |||
90 | dsa.crt ec.crt gost.crt rsa.crt: ca.crt ${@:R}.req | ||
91 | openssl x509 -CAcreateserial -CAkey ca.key -CA ca.crt \ | 82 | openssl x509 -CAcreateserial -CAkey ca.key -CA ca.crt \ |
92 | -req -in ${@:R}.req -out $@ | 83 | -req -in ${@:R}.req -out $@ |
diff --git a/src/regress/lib/libssl/interop/cipher/Makefile b/src/regress/lib/libssl/interop/cipher/Makefile index 627cfc8f9f..3a116d5ed5 100644 --- a/src/regress/lib/libssl/interop/cipher/Makefile +++ b/src/regress/lib/libssl/interop/cipher/Makefile | |||
@@ -1,4 +1,4 @@ | |||
1 | # $OpenBSD: Makefile,v 1.13 2023/10/30 17:15:21 tb Exp $ | 1 | # $OpenBSD: Makefile,v 1.14 2024/02/03 15:58:34 beck Exp $ |
2 | 2 | ||
3 | # Connect a client to a server. Both can be current libressl, or | 3 | # Connect a client to a server. Both can be current libressl, or |
4 | # openssl 1.1 or 3.0. Create lists of supported ciphers | 4 | # openssl 1.1 or 3.0. Create lists of supported ciphers |
@@ -6,17 +6,6 @@ | |||
6 | # certificate with compatible type. Check that client and server | 6 | # certificate with compatible type. Check that client and server |
7 | # have used correct cipher by grepping in their session print out. | 7 | # have used correct cipher by grepping in their session print out. |
8 | 8 | ||
9 | run-cipher-GOST2001-GOST89-GOST89-client-libressl-server-libressl \ | ||
10 | run-cipher-GOST2012256-GOST89-GOST89-client-libressl-server-libressl \ | ||
11 | client-cipher-GOST2012256-GOST89-GOST89-client-libressl-server-libressl.out \ | ||
12 | client-cipher-GOST2001-GOST89-GOST89-client-libressl-server-libressl.out \ | ||
13 | server-cipher-GOST2001-GOST89-GOST89-client-libressl-server-libressl.out \ | ||
14 | server-cipher-GOST2012256-GOST89-GOST89-client-libressl-server-libressl.out \ | ||
15 | check-cipher-GOST2001-GOST89-GOST89-client-libressl-server-libressl \ | ||
16 | check-cipher-GOST2012256-GOST89-GOST89-client-libressl-server-libressl: | ||
17 | # gost does not work with libressl TLS 1.3 right now | ||
18 | @echo DISABLED | ||
19 | |||
20 | LIBRARIES = libressl | 9 | LIBRARIES = libressl |
21 | .if exists(/usr/local/bin/eopenssl11) | 10 | .if exists(/usr/local/bin/eopenssl11) |
22 | LIBRARIES += openssl11 | 11 | LIBRARIES += openssl11 |
@@ -96,8 +85,6 @@ LEVEL_openssl30 = ,@SECLEVEL=0 | |||
96 | TYPE_${cipher} = dsa | 85 | TYPE_${cipher} = dsa |
97 | .elif "${cipher:M*-ECDSA-*}" != "" | 86 | .elif "${cipher:M*-ECDSA-*}" != "" |
98 | TYPE_${cipher} = ec | 87 | TYPE_${cipher} = ec |
99 | .elif "${cipher:M*-GOST89-*}" != "" | ||
100 | TYPE_${cipher} = gost | ||
101 | .elif "${cipher:M*-RSA-*}" != "" | 88 | .elif "${cipher:M*-RSA-*}" != "" |
102 | TYPE_${cipher} = rsa | 89 | TYPE_${cipher} = rsa |
103 | .else | 90 | .else |