]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
Add a daily run-checker test for the TLS security level
authorMatt Caswell <matt@openssl.org>
Tue, 24 Dec 2024 09:34:27 +0000 (09:34 +0000)
committerTomas Mraz <tomas@openssl.org>
Thu, 26 Dec 2024 18:55:38 +0000 (19:55 +0100)
Add a test to check that if the user reduces the default TLS security level
at configure time, then the tests still pass.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26256)

(cherry picked from commit 0958f5a5bc47e2cca907a3bfaf14059c020324fd)

.github/workflows/run-checker-daily.yml

index f4af3eb9a8a7a35e939bbf56d267440834793883..28c97a397571f2c0ba8156082be2ec3443e1a427 100644 (file)
@@ -132,7 +132,8 @@ jobs:
           enable-zlib-dynamic,
           no-zlib-dynamic,
           -DOPENSSL_NO_BUILTIN_OVERFLOW_CHECKING,
-          -DSSL3_ALIGN_PAYLOAD=4
+          -DSSL3_ALIGN_PAYLOAD=4,
+          -DOPENSSL_TLS_SECURITY_LEVEL=0
         ]
     runs-on: ubuntu-latest
     steps: