xref: /openbsd/regress/lib/libssl/interop/README (revision 274d7c50)
1Test TLS interoperability between LibreSSL and OpenSSL.
2
3Implement simple SSL client and server in C.  Create six binaries
4by linking them with LibreSSL or OpenSSL 1.0.2 or OpenSSL 1.1.  This
5way API compatibility is tested.
6
7To self test each SSL library, connect client with server.  Check
8that the highest available TLS version is selected.  LibreSSL TLS
91.3 check has to be enabled when the feature becomes available.
10
11Currently OpenSSL 1.0.2p and OpenSSL 1.1.1 from ports are used.  As
12soon as LibreSSL supports TLS 1.3, it should be used automatically
13when netcat is communicating with OpenSSL 1.1.
14
15Connect and accept with netcat to test protocol compatibility with
16libtls.  Test TLS session reuse multiple times with different library
17combinations.  The cert subdir is testing all combinations of
18certificate validation.  Having the three libraries, client and
19server certificates, missing or invalid CA or certificates, and
20enforcing peer certificate results in 1944 test cases.  The cipher
21test establishes connections between implementations for each
22supported cipher.
23