diff --git a/scripts/openssl.test b/scripts/openssl.test index e0c42c001f..525e2d3134 100755 --- a/scripts/openssl.test +++ b/scripts/openssl.test @@ -1234,26 +1234,35 @@ done IFS="$OIFS" #restore separator # Test for RSA-PSS certs interop -echo -e "Doing interop RSA-PSS test" - -key_file=${CERT_DIR}/rsapss/server-rsapss-priv.pem -cert_file=${CERT_DIR}/rsapss/server-rsapss.pem -ca_file=${CERT_DIR}/client-cert.pem -openssl_suite="RSAPSS" -start_openssl_server - -cert="${CERT_DIR}/client-cert.pem" -key="${CERT_DIR}/client-key.pem" -caCert="${CERT_DIR}/rsapss/ca-rsapss.pem" -crl="-C" -wolfSuite="ALL" -wolfssl_no_resume="yes" -version="4" -port=$server_port -do_wolfssl_client - -version="3" -do_wolfssl_client +# was running into alert sent by openssl server with version 1.1.1 released in +# Sep 2018 + +$OPENSSL version | awk '{print $2}' | awk -F. '{if ($1 >= 3) exit 1; else exit 0;}' +RESULT=$? +if [ "$RESULT" = "0" ]; then + echo -e "Older version of openssl detected, skipping interop RSA-PSS test" +else + echo -e "Doing interop RSA-PSS test" + + key_file=${CERT_DIR}/rsapss/server-rsapss-priv.pem + cert_file=${CERT_DIR}/rsapss/server-rsapss.pem + ca_file=${CERT_DIR}/client-cert.pem + openssl_suite="RSAPSS" + start_openssl_server + + cert="${CERT_DIR}/client-cert.pem" + key="${CERT_DIR}/client-key.pem" + caCert="${CERT_DIR}/rsapss/ca-rsapss.pem" + crl="-C" + wolfSuite="ALL" + wolfssl_no_resume="yes" + version="4" + port=$server_port + do_wolfssl_client + + version="3" + do_wolfssl_client +fi do_cleanup