]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
Add a daily run-checker test for the TLS security level
authorMatt Caswell <matt@openssl.org>
Tue, 24 Dec 2024 09:34:27 +0000 (09:34 +0000)
committerTomas Mraz <tomas@openssl.org>
Thu, 26 Dec 2024 18:55:17 +0000 (19:55 +0100)
Add a test to check that if the user reduces the default TLS security level
at configure time, then the tests still pass.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26256)

.github/workflows/run-checker-daily.yml

index cb3087a15ee35a10023716fefe2ebfcbfa7c63be..7ecc5c354aa8b87b424f135965924510eb768790 100644 (file)
@@ -138,7 +138,8 @@ jobs:
           -DOPENSSL_PEDANTIC_ZEROIZATION,
           -DOPENSSL_PEDANTIC_ZEROIZATION enable-fips,
           -DOPENSSL_NO_BUILTIN_OVERFLOW_CHECKING,
-          -DSSL3_ALIGN_PAYLOAD=4
+          -DSSL3_ALIGN_PAYLOAD=4,
+          -DOPENSSL_TLS_SECURITY_LEVEL=0
         ]
     runs-on: ubuntu-latest
     steps: