test: update ssl_new tests in line with pedantic FIPS policy
authorPauli <pauli@openssl.org>
Tue, 18 Apr 2023 04:41:17 +0000 (14:41 +1000)
committerHugo Landau <hlandau@openssl.org>
Fri, 21 Apr 2023 16:04:11 +0000 (17:04 +0100)
commit3375ae41847c133d1ce731bc8fd367d12b0049fd
tree6708e30812a61144050f01bfa5326a3c507e88da
parent313849eeb71e49a80b912cc79ae0a78f83d6fefb
test: update ssl_new tests in line with pedantic FIPS policy

Add a new option to the `test' section of SSL test data structure.
This contains a space separated list of version checks, all of which must
pass.

Note that the version checks are as they as because:

- 3.1.0 doesn't have mandatory EMS support, so it can run the old tests.
- 3.1.1 (& later) will have mandatory EMS support, so they can't run them.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)

(cherry picked from commit 4454c20f026bb47f158ea05c207f143c81d674d8)
test/helpers/ssl_test_ctx.c
test/helpers/ssl_test_ctx.h
test/ssl-tests/30-extended-master-secret.cnf
test/ssl-tests/30-extended-master-secret.cnf.in
test/ssl_test.c