Investigate SslRefreshSpec failures

[graemerocher]

Expected Behavior

SslRefreshSpec should pass

Actual Behaviour

Currently SslRefreshSpec fails on CI for an unexplained reason. We need to investigate why

Steps To Reproduce

No response

Environment Information

No response

Example Application

No response

Version

4.10.x

[Aliaksie]

Hi @graemerocher

I’ve investigated this issue and opened a PR that should address it.

The root cause appears to be that when tests run with the OpenSSL provider, the available cipher suite list differs from the one expected in the test. Depending on the OS and OpenSSL version, some requested ciphers are simply not supported, which leads to test failure.

In the PR, I added logic to dynamically validate the requested ciphers against the provider’s available cipher list and skip the test if none remain after filtering.

Would appreciate your review and feedback :-)