From: Darren Tucker <dtucker@dtucker.net>
Date: Wed, 9 Nov 2022 09:59:20 +0000 (+1100)
Subject: Skip reexec test on OpenSSL 1.1.1 specifically.
X-Git-Tag: V_9_2_P1~111
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ca98d3f8c64cfc51af81e1b01c36a919d5947ec2;p=thirdparty%2Fopenssh-portable.git

Skip reexec test on OpenSSL 1.1.1 specifically.

OpenSSL 1.1.1 has a bug in its RNG that breaks reexec fallback, so skip
that test.  See bz#3483 for details.
---

diff --git a/.github/configs b/.github/configs
index d3171a83a..a7bc7ba53 100755
--- a/.github/configs
+++ b/.github/configs
@@ -141,6 +141,11 @@ case "$config" in
 	;;
     openssl-*)
 	LIBCRYPTOFLAGS="--with-ssl-dir=/opt/openssl --with-rpath=-Wl,-rpath,"
+	# OpenSSL 1.1.1 specifically has a bug in its RNG that breaks reexec
+	# fallback.  See https://bugzilla.mindrot.org/show_bug.cgi?id=3483
+	if [ "$config" = "openssl-1.1.1" ]; then
+		SKIP_LTESTS="reexec"
+	fi
 	;;
     selinux)
 	CONFIGFLAGS="--with-selinux"