From: Ilia Shipitsin <chipitsine@gmail.com>
Date: Mon, 7 Jul 2025 06:53:21 +0000 (+0200)
Subject: CI: enable USE_QUIC=1 for OpenSSL versions >= 3.5.0
X-Git-Tag: v3.3-dev3~37
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=d8c867a1e6ed8aab142ff9d62ea246e29d0982bb;p=thirdparty%2Fhaproxy.git

CI: enable USE_QUIC=1 for OpenSSL versions >= 3.5.0

OpenSSL 3.5.0 introduced experimental support for QUIC. This change enables the use_quic option when a compatible version of OpenSSL is detected, allowing QUIC-based functionality to be leveraged where applicable. Feature remains disabled for earlier versions to ensure compatibility.
---

diff --git a/.github/matrix.py b/.github/matrix.py
index efecb338f..996b79248 100755
--- a/.github/matrix.py
+++ b/.github/matrix.py
@@ -232,8 +232,6 @@ def main(ref_name):
 
         for ssl in ssl_versions:
             flags = ["USE_OPENSSL=1"]
-            if ssl == "BORINGSSL=yes" or ssl == "QUICTLS=yes" or "LIBRESSL" in ssl or "WOLFSSL" in ssl or "AWS_LC" in ssl:
-                flags.append("USE_QUIC=1")
             if "WOLFSSL" in ssl:
                 flags.append("USE_OPENSSL_WOLFSSL=1")
             if "AWS_LC" in ssl:
@@ -246,6 +244,15 @@ def main(ref_name):
             if "OPENSSL" in ssl and "latest" in ssl:
                 ssl = determine_latest_openssl(ssl)
 
+            openssl_supports_quic = False
+            try:
+              openssl_supports_quic = version.Version(ssl.split("OPENSSL_VERSION=",1)[1]) >= version.Version("3.5.0")
+            except:
+              pass
+
+            if ssl == "BORINGSSL=yes" or ssl == "QUICTLS=yes" or "LIBRESSL" in ssl or "WOLFSSL" in ssl or "AWS_LC" in ssl or openssl_supports_quic:
+                flags.append("USE_QUIC=1")
+
             matrix.append(
                 {
                     "name": "{}, {}, ssl={}".format(os, CC, clean_ssl(ssl)),