xref: /openbsd-src/regress/lib/libssl/interop/README (revision 9f11ffb7133c203312a01e4b986886bc88c7d74b)
1Test TLS interoperability between LibreSSL and OpenSSL.
2
3Implement simple SSL client and server in C.  Create six binaries
4by linking them with LibreSSL or OpenSSL 1.0.2 or OpenSSL 1.1.  This
5way API compatibility is tested.
6
7To self test each SSL library, connect client with server.  Check
8that the highest available TLS version is selected.  LibreSSL TLS
91.3 check has to be enabled when the feature becomes available.
10
11Currently OpenSSL 1.0.2p and OpenSSL 1.1.1 from ports are used.  As
12soon as LibreSSL supports TLS 1.3, it should be used automatically
13when netcat is communicating with OpenSSL 1.1.
14
15Connect and accept with netcat to test protocol compatibility with
16libtls.  Test TLS session reuse multiple times with different library
17combinations.  The cert subdir is testing all combinations of
18certificate validation.  Having the three libraries, client and
19server certificates, missing or invalid CA or certificates, and
20enforcing peer certificate results in 1944 test cases.
21