From 947d4b67f58622016e1382a0d9c625d8e9433262 Mon Sep 17 00:00:00 2001 From: Andrew Hopkins Date: Wed, 30 Aug 2023 16:33:13 -0700 Subject: [PATCH 2/3] MINOR: test: skip ssl_dh test when HAProxy is built with AWS-LC which does not support FFDH ciphersuites. --- reg-tests/ssl/ssl_dh.vtc | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/reg-tests/ssl/ssl_dh.vtc b/reg-tests/ssl/ssl_dh.vtc index 9553f371d..36e72b8ff 100644 --- a/reg-tests/ssl/ssl_dh.vtc +++ b/reg-tests/ssl/ssl_dh.vtc @@ -18,7 +18,8 @@ # stop using deprecated APIs. varnishtest "Test the DH related SSL options" -feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL)'" +# AWS-LC does not support any FFDH ciphersuites +feature cmd "$HAPROXY_PROGRAM -cc 'feature(OPENSSL) && !ssllib_name_startswith(AWS-LC)'" feature cmd "command -v openssl && command -v grep && command -v socat" feature ignore_unknown_macro -- 2.37.1 (Apple Git-137.1)