tests: check openssl version compatibility for fuzz tests
What the developer wrote
Authored by ShahanaFarooqui
tests: check openssl version compatibility for fuzz tests
This check will exclude fuzz tests for Ubuntu Focal as it supports OpenSSL v1.1.1f while CLN requires ≥ v3.0.
What changed, and why it matters
This commit changes the build system so that fuzz tests are skipped when OpenSSL is older than version 3.0. It is a test/build compatibility tweak, not a fix for a vulnerability in the running software. There is no indication it addresses an active security flaw.
No security action required. Treat as a normal build/test maintenance commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The Makefile now detects the major version of the system OpenSSL and only includes tests/fuzz/Makefile if the version is 3 or higher. This is explicitly to avoid build/test failures on Ubuntu Focal, which ships OpenSSL 1.1.1f. The change does not modify Core Lightning’s runtime code, cryptography, or network handling.
Changed components
Makefile build configurationtests/fuzz test suite inclusion logicInspect captured patch +5 / −0
diff --git a/Makefile b/Makefile
index 32293fd7..32e95d48 100644
--- a/Makefile
+++ b/Makefile
@@ -392,7 +392,12 @@ include cln-grpc/Makefile
endif
include plugins/Makefile
include tests/plugins/Makefile
+
+# Only include fuzz tests if OpenSSL >= 3.0, will be disabled on ubuntu focal
+OPENSSL_VERSION := $(shell openssl version | sed -n 's/OpenSSL \([0-9]\+\)\..*/\1/p')
+ifneq ($(shell test $(OPENSSL_VERSION) -ge 3 && echo yes),)
include tests/fuzz/Makefile
+endif
ifneq ($V,1)
MSGGEN_ARGS := -s
Why this scored 16/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.