From: Matt Caswell <matt@openssl.org>
Date: Tue, 24 Dec 2024 09:34:27 +0000 (+0000)
Subject: Add a daily run-checker test for the TLS security level
X-Git-Tag: openssl-3.4.1~75
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f8f246a1f75e825050b94732b9b27f122797ecbd;p=thirdparty%2Fopenssl.git

Add a daily run-checker test for the TLS security level

Add a test to check that if the user reduces the default TLS security level
at configure time, then the tests still pass.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26256)

(cherry picked from commit 0958f5a5bc47e2cca907a3bfaf14059c020324fd)
---

diff --git a/.github/workflows/run-checker-daily.yml b/.github/workflows/run-checker-daily.yml
index f4af3eb9a8a..28c97a39757 100644
--- a/.github/workflows/run-checker-daily.yml
+++ b/.github/workflows/run-checker-daily.yml
@@ -132,7 +132,8 @@ jobs:
           enable-zlib-dynamic,
           no-zlib-dynamic,
           -DOPENSSL_NO_BUILTIN_OVERFLOW_CHECKING,
-          -DSSL3_ALIGN_PAYLOAD=4
+          -DSSL3_ALIGN_PAYLOAD=4,
+          -DOPENSSL_TLS_SECURITY_LEVEL=0
         ]
     runs-on: ubuntu-latest
     steps: