valid_tls_versions_in is not available if ATS is built with BoringSSL. And autest (tls_client_versions) fails due to the unavailability.
The documentation do say the key is only valid for recent OpenSSL, but it doesn't justify autest failure.
We may be able to make it available for BoringSSL by using SSL_CTX_set_select_certificate_cb.
SSL_CTX_set_select_certificate_cb sets a callback that is called before most ClientHello processing and before the decision whether to resume a session is made. The callback may inspect the ClientHello and configure the connection. See ssl_select_cert_result_t for details of the return values.
If we cannot provide the feature for BoringSSL, the test should be skipped.
valid_tls_versions_inis not available if ATS is built with BoringSSL. And autest (tls_client_versions) fails due to the unavailability.The documentation do say the key is only valid for recent OpenSSL, but it doesn't justify autest failure.
We may be able to make it available for BoringSSL by using
SSL_CTX_set_select_certificate_cb.If we cannot provide the feature for BoringSSL, the test should be skipped.