Provide tools to build certificate changes for verify regress.

This provides a script that generates a variety of certificate chains
and assembles them into bundles containing various permutations, which
can be used to test our X.509 verification.

A Go program is included to verify each of these bundles.

ok beck@ tb@

1 files changed, 21 insertions, 0 deletions

diff --git a/regress/lib/libcrypto/certs/Makefile b/regress/lib/libcrypto/certs/Makefile
new file mode 100644
index 00000000000..621c60907fb
--- /dev/null
+++ b/regress/lib/libcrypto/certs/Makefile
@@ -0,0 +1,21 @@
+#	$OpenBSD: Makefile,v 1.1 2020/07/14 18:27:28 jsing Exp $
+
+.if ! (make(clean) || make(cleandir) || make(obj))
+GO_VERSION != sh -c "(go version) 2>/dev/null || true"
+.endif
+
+.if empty(GO_VERSION)
+regress:
+	@echo package go is required for this regress
+	@echo SKIPPED
+.endif
+
+REGRESS_TARGETS=regress-go-verify
+
+certs:
+	cd ${.CURDIR} && sh ./make-certs.sh
+
+regress-go-verify:
+	cd ${.CURDIR} && go test -test.v .
+
+.include <bsd.regress.mk>