#
# Modern Linux distributions like EL8, Debian 10 and Ubuntu 20.04 restrict minimum TLS
# protocol version to TLSv1.2, try to detect this and skip TLSv1/TLSv1.1 tests.
#
--perl
  use strict;
  use warnings;
  my $crypto_policy = '/etc/crypto-policies/back-ends/opensslcnf.config';
  my $openssl_conf = '/etc/ssl/openssl.cnf';
  my $os_release = '/etc/os-release';
  my $policy_file = "";
  if (-r $crypto_policy) {
    $policy_file = $crypto_policy;
  } elsif (-r $openssl_conf) {
    $policy_file = $openssl_conf;
  }
  my $min_protocol_tlsv1_2 = 0;
  if ($policy_file ne "") {
    open(my $RH, "<", $policy_file) or die "Could not open $policy_file $!";
    while (<$RH>) {
      if (/^MinProtocol\s=\sTLSv1\.2/) {
	$min_protocol_tlsv1_2 = 1;
	last;
      }
    }
    close $RH;
  }
  # On Ubuntu security level 2 means TLSv1.2+
  if (-r $os_release && -x '/usr/bin/openssl') {
    open(my $OH, "<", $os_release) or die "Could not open $os_release $!";
    while (<$OH>) {
      if (/Ubuntu/) {
        chomp(my $compiled_options = `/usr/bin/openssl version -f`);
        if (index($compiled_options, 'OPENSSL_TLS_SECURITY_LEVEL=2') > -1) {
          $min_protocol_tlsv1_2 = 1;
        }
        last;
      }
    }
    close $OH;
  }
  open (my $WH, ">", "$ENV{MYSQL_TMP_DIR}/crypto_policy.inc") or die "Could not open $ENV{MYSQL_TMP_DIR}/crypto_policy.inc: $!";
  print $WH "let \$min_protocol_tlsv1_2 = $min_protocol_tlsv1_2;\n";
  close $WH;
EOF
--source $MYSQL_TMP_DIR/crypto_policy.inc
--remove_file $MYSQL_TMP_DIR/crypto_policy.inc

if ($min_protocol_tlsv1_2)
{
  --Skip Test requires TLS protocol lesser than 1.2, while OpenSSL policy sets MinProtocol TLSv1.2
}