From: Andrew Hopkins <andhop@amazon.com>
Date: Wed, 30 Aug 2023 23:33:13 +0000 (-0700)
Subject: REGTESTS: ssl: skip ssl_dh test with AWS-LC
X-Git-Tag: v2.9-dev5~61
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=88988bb06ccadb1c5486d1e61d9aa6c75e36a404;p=thirdparty%2Fhaproxy.git

REGTESTS: ssl: skip ssl_dh test with AWS-LC

skip ssl_dh test when HAProxy is built with AWS-LC which does not support FFDH ciphersuites.
---

diff --git a/reg-tests/ssl/ssl_dh.vtc b/reg-tests/ssl/ssl_dh.vtc
index 9553f371d7..36e72b8ff1 100644
--- a/reg-tests/ssl/ssl_dh.vtc
+++ b/reg-tests/ssl/ssl_dh.vtc
@@ -18,7 +18,8 @@
 # stop using deprecated APIs.
 
 varnishtest "Test the DH related SSL options"
-feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL)'"
+# AWS-LC does not support any FFDH ciphersuites
+feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL) && !ssllib_name_startswith(AWS-LC)'"
 feature cmd "command -v openssl && command -v grep && command -v socat"
 feature ignore_unknown_macro