Gilles Peskine 63a2b91269 Fix SSL tests scripts with recent OpenSSL server with Diffie-Hellman ... Our interoperability tests fail with a recent OpenSSL server. The reason is that they force 1024-bit Diffie-Hellman parameters, which recent OpenSSL (e.g. 1.1.1f on Ubuntu 20.04) reject: ``` 140072814650688:error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small:../ssl/s3_lib.c:3782: ``` We've been passing custom DH parameters since 6195767554da332e9f81e6510b07f7565ff8a538 because OpenSSL <=1.0.2a requires it. This is only concerns the version we use as OPENSSL_LEGACY. So only use custom DH parameters for that version. In compat.sh, use it based on the observed version of $OPENSSL_CMD. This way, ssl-opt.sh and compat.sh work (barring other issues) for all our reference versions of OpenSSL as well as for a modern system OpenSSL. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>		2021-04-09 17:28:04 +02:00
..
.jenkins	Add Jenkinsfile for PR job	2018-10-19 15:25:10 +01:00
configs	Update copyright notices to use Linux Foundation guidance	2020-08-19 16:37:36 +02:00
data_files	Merge branch 'mbedtls-2.16-restricted' into mbedtls-2.16.9r0-pr	2020-12-08 21:00:17 +00:00
git-scripts	Fix license header in pre-commit hook	2020-08-19 17:54:47 +02:00
scripts	Make check-names.sh accept any grep	2021-04-07 15:03:53 +01:00
suites	Merge pull request #3720 from militant-daos/mbedtls-2.16	2021-03-30 17:33:12 +02:00
.gitignore	Move some ignore patterns to subdirectories	2015-01-28 15:33:23 +00:00
CMakeLists.txt	Merge remote-tracking branch 'origin/pr/2293' into mbedtls-2.16	2019-03-05 16:31:02 +00:00
compat.sh	Fix SSL tests scripts with recent OpenSSL server with Diffie-Hellman	2021-04-09 17:28:04 +02:00
Descriptions.txt	Add selftest program to the list of tests	2014-04-04 16:33:01 +02:00
Makefile	Merge remote-tracking branch 'origin/pr/2053' into mbedtls-2.16	2019-06-21 15:59:16 +01:00
ssl-opt.sh	Fix SSL tests scripts with recent OpenSSL server with Diffie-Hellman	2021-04-09 17:28:04 +02:00