Merge pull request #331 from jtesta/upgrade_openssl_35

Add support for post-quantum groups

Author: rbsec

.github/workflows/ci.yml

@@ -13,7 +13,17 @@ jobs:
       - uses: actions/checkout@v4
       - name: build with ${{ matrix.cc }}
         run: |
-          make sslscan
+          # Since ubuntu-latest does not ship with OpenSSL >= v3.5, dynamic linking will fail unless we build and install it.
+          git clone -b openssl-3.5 https://github.com/openssl/openssl
+          pushd openssl
+          git fetch --tags
+          git checkout openssl-3.5.0
+          ./config --prefix=/opt/openssl35 shared
+          make -j $(nproc --all)
+          make install
+          popd
+
+          make sslscan LDFLAGS=-L/opt/openssl35 CFLAGS=-I/opt/openssl35/include
           make static
         env:
           CC: ${{ matrix.cc }}

docker_test/expected_output/test_6.txt

@@ -28,7 +28,7 @@ TLSv1.3 not vulnerable to heartbleed
 Accepted  TLSv1.3  256 bits  TLS_AES_256_GCM_SHA384        Curve 25519 DHE 253
 Accepted  TLSv1.3  256 bits  TLS_CHACHA20_POLY1305_SHA256  Curve 25519 DHE 253
 Accepted  TLSv1.3  128 bits  TLS_AES_128_CCM_SHA256        Curve 25519 DHE 253
-Accepted  TLSv1.3  128 bits  TLS_AES_128_CCM_8_SHA256      Curve 25519 DHE 253
+Accepted  TLSv1.3  64 bits   TLS_AES_128_CCM_8_SHA256      Curve 25519 DHE 253
 
   Server Key Exchange Group(s):
 TLSv1.3  128 bits  secp256r1 (NIST P-256)