1 # Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
3 # Licensed under the OpenSSL license (the "License"). You may not use
4 # this file except in compliance with the License. You can obtain a copy
5 # in the file LICENSE in the source distribution or at
6 # https://www.openssl.org/source/license.html
16 use vars qw($VERSION @ISA @EXPORT @EXPORT_OK %EXPORT_TAGS);
19 @EXPORT = (@Test::More::EXPORT, qw(setup indir app fuzz perlapp test perltest
21 @EXPORT_OK = (@Test::More::EXPORT_OK, qw(bldtop_dir bldtop_file
22 srctop_dir srctop_file
23 pipe with cmdstr quotify));
27 OpenSSL::Test - a private extension of Test::More
33 setup("my_test_name");
35 ok(run(app(["openssl", "version"])), "check for openssl presence");
37 indir "subdir" => sub {
38 ok(run(test(["sometest", "arg1"], stdout => "foo.txt")),
39 "run sometest with output to foo.txt");
44 This module is a private extension of L<Test::More> for testing OpenSSL.
45 In addition to the Test::More functions, it also provides functions that
46 easily find the diverse programs within a OpenSSL build tree, as well as
47 some other useful functions.
49 This module I<depends> on the environment variables C<$TOP> or C<$SRCTOP>
50 and C<$BLDTOP>. Without one of the combinations it refuses to work.
51 See L</ENVIRONMENT> below.
56 use File::Spec::Functions qw/file_name_is_absolute curdir canonpath splitdir
57 catdir catfile splitpath catpath devnull abs2rel
59 use File::Path 2.00 qw/rmtree mkpath/;
62 # The name of the test. This is set by setup() and is used in the other
63 # functions to verify that setup() has been used.
64 my $test_name = undef;
66 # Directories we want to keep track of TOP, APPS, TEST and RESULTS are the
67 # ones we're interested in, corresponding to the environment variables TOP
68 # (mandatory), BIN_D, TEST_D, UTIL_D and RESULT_D.
71 # The environment variables that gave us the contents in %directories. These
72 # get modified whenever we change directories, so that subprocesses can use
73 # the values of those environment variables as well
76 # A bool saying if we shall stop all testing if the current recipe has failing
77 # tests or not. This is set by setup() if the environment variable STOPTEST
78 # is defined with a non-empty value.
79 my $end_with_bailout = 0;
81 # A set of hooks that is affected by with() and may be used in diverse places.
82 # All hooks are expected to be CODE references.
85 # exit_checker is used by run() directly after completion of a command.
86 # it receives the exit code from that command and is expected to return
87 # 1 (for success) or 0 (for failure). This is the value that will be
89 # NOTE: When run() gets the option 'capture => 1', this hook is ignored.
90 exit_checker => sub { return shift == 0 ? 1 : 0 },
94 # Debug flag, to be set manually when needed
97 # Declare some utility functions that are defined at the end
104 # Declare some private functions that are defined at the end
112 =head2 Main functions
114 The following functions are exported by default when using C<OpenSSL::Test>.
120 =item B<setup "NAME">
122 C<setup> is used for initial setup, and it is mandatory that it's used.
123 If it's not used in a OpenSSL test recipe, the rest of the recipe will
124 most likely refuse to run.
126 C<setup> checks for environment variables (see L</ENVIRONMENT> below),
127 checks that C<$TOP/Configure> or C<$SRCTOP/Configure> exists, C<chdir>
128 into the results directory (defined by the C<$RESULT_D> environment
129 variable if defined, otherwise C<$BLDTOP/test> or C<$TOP/test>, whichever
137 my $old_test_name = $test_name;
140 BAIL_OUT("setup() must receive a name") unless $test_name;
141 warn "setup() detected test name change. Innocuous, so we continue...\n"
142 if $old_test_name && $old_test_name ne $test_name;
144 return if $old_test_name;
146 BAIL_OUT("setup() needs \$TOP or \$SRCTOP and \$BLDTOP to be defined")
147 unless $ENV{TOP} || ($ENV{SRCTOP} && $ENV{BLDTOP});
148 BAIL_OUT("setup() found both \$TOP and \$SRCTOP or \$BLDTOP...")
149 if $ENV{TOP} && ($ENV{SRCTOP} || $ENV{BLDTOP});
153 BAIL_OUT("setup() expects the file Configure in the source top directory")
154 unless -f srctop_file("Configure");
156 __cwd($directories{RESULTS});
161 =item B<indir "SUBDIR" =E<gt> sub BLOCK, OPTS>
163 C<indir> is used to run a part of the recipe in a different directory than
164 the one C<setup> moved into, usually a subdirectory, given by SUBDIR.
165 The part of the recipe that's run there is given by the codeblock BLOCK.
167 C<indir> takes some additional options OPTS that affect the subdirectory:
171 =item B<create =E<gt> 0|1>
173 When set to 1 (or any value that perl preceives as true), the subdirectory
174 will be created if it doesn't already exist. This happens before BLOCK
177 =item B<cleanup =E<gt> 0|1>
179 When set to 1 (or any value that perl preceives as true), the subdirectory
180 will be cleaned out and removed. This happens both before and after BLOCK
188 ok(run(app(["openssl", "version"]), stdout => "foo.txt"));
189 if (ok(open(RESULT, "foo.txt"), "reading foo.txt")) {
192 is($line, qr/^OpenSSL 1\./,
193 "check that we're using OpenSSL 1.x.x");
195 }, create => 1, cleanup => 1;
203 my $codeblock = shift;
206 my $reverse = __cwd($subdir,%opts);
207 BAIL_OUT("FAILURE: indir, \"$subdir\" wasn't possible to move into")
214 if ($opts{cleanup}) {
215 rmtree($subdir, { safe => 0 });
221 =item B<app ARRAYREF, OPTS>
223 =item B<test ARRAYREF, OPTS>
225 Both of these functions take a reference to a list that is a command and
226 its arguments, and some additional options (described further on).
228 C<app> expects to find the given command (the first item in the given list
229 reference) as an executable in C<$BIN_D> (if defined, otherwise C<$TOP/apps>
232 C<test> expects to find the given command (the first item in the given list
233 reference) as an executable in C<$TEST_D> (if defined, otherwise C<$TOP/test>
236 Both return a CODEREF to be used by C<run>, C<pipe> or C<cmdstr>.
238 The options that both C<app> and C<test> can take are in the form of hash
243 =item B<stdin =E<gt> PATH>
245 =item B<stdout =E<gt> PATH>
247 =item B<stderr =E<gt> PATH>
249 In all three cases, the corresponding standard input, output or error is
250 redirected from (for stdin) or to (for the others) a file given by the
251 string PATH, I<or>, if the value is C<undef>, C</dev/null> or similar.
255 =item B<perlapp ARRAYREF, OPTS>
257 =item B<perltest ARRAYREF, OPTS>
259 Both these functions function the same way as B<app> and B<test>, except
260 that they expect the command to be a perl script. Also, they support one
265 =item B<interpreter_args =E<gt> ARRAYref>
267 The array reference is a set of arguments for perl rather than the script.
268 Take care so that none of them can be seen as a script! Flags and their
269 eventual arguments only!
275 ok(run(perlapp(["foo.pl", "arg1"],
276 interpreter_args => [ "-I", srctop_dir("test") ])));
285 return sub { my $num = shift;
286 return __build_cmd($num, \&__apps_file, $cmd, %opts); }
292 return sub { my $num = shift;
293 return __build_cmd($num, \&__fuzz_file, $cmd, %opts); }
299 return sub { my $num = shift;
300 return __build_cmd($num, \&__test_file, $cmd, %opts); }
306 return sub { my $num = shift;
307 return __build_cmd($num, \&__perlapps_file, $cmd, %opts); }
313 return sub { my $num = shift;
314 return __build_cmd($num, \&__perltest_file, $cmd, %opts); }
319 =item B<run CODEREF, OPTS>
321 This CODEREF is expected to be the value return by C<app> or C<test>,
322 anything else will most likely cause an error unless you know what you're
325 C<run> executes the command returned by CODEREF and return either the
326 resulting output (if the option C<capture> is set true) or a boolean indicating
327 if the command succeeded or not.
329 The options that C<run> can take are in the form of hash values:
333 =item B<capture =E<gt> 0|1>
335 If true, the command will be executed with a perl backtick, and C<run> will
336 return the resulting output as an array of lines. If false or not given,
337 the command will be executed with C<system()>, and C<run> will return 1 if
338 the command was successful or 0 if it wasn't.
342 For further discussion on what is considered a successful command or not, see
343 the function C<with> further down.
350 my ($cmd, $display_cmd) = shift->(0);
356 if ( $^O eq "VMS" ) { # VMS
364 # In non-verbose, we want to shut up the command interpreter, in case
365 # it has something to complain about. On VMS, it might complain both
366 # on stdout and stderr
369 if ($ENV{HARNESS_ACTIVE} && !$ENV{HARNESS_VERBOSE}) {
370 open $save_STDOUT, '>&', \*STDOUT or die "Can't dup STDOUT: $!";
371 open $save_STDERR, '>&', \*STDERR or die "Can't dup STDERR: $!";
372 open STDOUT, ">", devnull();
373 open STDERR, ">", devnull();
376 # The dance we do with $? is the same dance the Unix shells appear to
377 # do. For example, a program that gets aborted (and therefore signals
378 # SIGABRT = 6) will appear to exit with the code 134. We mimic this
379 # to make it easier to compare with a manual run of the command.
380 if ($opts{capture}) {
382 $e = ($? & 0x7f) ? ($? & 0x7f)|0x80 : ($? >> 8);
384 system("$prefix$cmd");
385 $e = ($? & 0x7f) ? ($? & 0x7f)|0x80 : ($? >> 8);
386 $r = $hooks{exit_checker}->($e);
389 if ($ENV{HARNESS_ACTIVE} && !$ENV{HARNESS_VERBOSE}) {
392 open STDOUT, '>&', $save_STDOUT or die "Can't restore STDOUT: $!";
393 open STDERR, '>&', $save_STDERR or die "Can't restore STDERR: $!";
396 print STDERR "$prefix$display_cmd => $e\n"
397 if !$ENV{HARNESS_ACTIVE} || $ENV{HARNESS_VERBOSE};
399 # At this point, $? stops being interesting, and unfortunately,
400 # there are Test::More versions that get picky if we leave it
404 if ($opts{capture}) {
412 my $tb = Test::More->builder;
413 my $failure = scalar(grep { $_ == 0; } $tb->summary);
414 if ($failure && $end_with_bailout) {
415 BAIL_OUT("Stoptest!");
419 =head2 Utility functions
421 The following functions are exported on request when using C<OpenSSL::Test>.
423 # To only get the bldtop_file and srctop_file functions.
424 use OpenSSL::Test qw/bldtop_file srctop_file/;
426 # To only get the bldtop_file function in addition to the default ones.
427 use OpenSSL::Test qw/:DEFAULT bldtop_file/;
431 # Utility functions, exported on request
435 =item B<bldtop_dir LIST>
437 LIST is a list of directories that make up a path from the top of the OpenSSL
438 build directory (as indicated by the environment variable C<$TOP> or
440 C<bldtop_dir> returns the resulting directory as a string, adapted to the local
448 return __bldtop_dir(@_); # This caters for operating systems that have
449 # a very distinct syntax for directories.
454 =item B<bldtop_file LIST, FILENAME>
456 LIST is a list of directories that make up a path from the top of the OpenSSL
457 build directory (as indicated by the environment variable C<$TOP> or
458 C<$BLDTOP>) and FILENAME is the name of a file located in that directory path.
459 C<bldtop_file> returns the resulting file path as a string, adapted to the local
467 return __bldtop_file(@_);
472 =item B<srctop_dir LIST>
474 LIST is a list of directories that make up a path from the top of the OpenSSL
475 source directory (as indicated by the environment variable C<$TOP> or
477 C<srctop_dir> returns the resulting directory as a string, adapted to the local
485 return __srctop_dir(@_); # This caters for operating systems that have
486 # a very distinct syntax for directories.
491 =item B<srctop_file LIST, FILENAME>
493 LIST is a list of directories that make up a path from the top of the OpenSSL
494 source directory (as indicated by the environment variable C<$TOP> or
495 C<$SRCTOP>) and FILENAME is the name of a file located in that directory path.
496 C<srctop_file> returns the resulting file path as a string, adapted to the local
504 return __srctop_file(@_);
511 LIST is a list of CODEREFs returned by C<app> or C<test>, from which C<pipe>
512 creates a new command composed of all the given commands put together in a
513 pipe. C<pipe> returns a new CODEREF in the same manner as C<app> or C<test>,
514 to be passed to C<run> for execution.
529 my ($c, $dc, @el) = $_->(++$counter);
547 =item B<with HASHREF, CODEREF>
549 C<with> will temporarly install hooks given by the HASHREF and then execute
550 the given CODEREF. Hooks are usually expected to have a coderef as value.
552 The currently available hoosk are:
556 =item B<exit_checker =E<gt> CODEREF>
558 This hook is executed after C<run> has performed its given command. The
559 CODEREF receives the exit code as only argument and is expected to return
560 1 (if the exit code indicated success) or 0 (if the exit code indicated
572 my $codeblock = shift;
574 my %saved_hooks = ();
576 foreach (keys %opts) {
577 $saved_hooks{$_} = $hooks{$_} if exists($hooks{$_});
578 $hooks{$_} = $opts{$_};
583 foreach (keys %saved_hooks) {
584 $hooks{$_} = $saved_hooks{$_};
590 =item B<cmdstr CODEREF, OPTS>
592 C<cmdstr> takes a CODEREF from C<app> or C<test> and simply returns the
595 C<cmdstr> takes some additiona options OPTS that affect the string returned:
599 =item B<display =E<gt> 0|1>
601 When set to 0, the returned string will be with all decorations, such as a
602 possible redirect of stderr to the null device. This is suitable if the
603 string is to be used directly in a recipe.
605 When set to 1, the returned string will be without extra decorations. This
606 is suitable for display if that is desired (doesn't confuse people with all
607 internal stuff), or if it's used to pass a command down to a subprocess.
618 my ($cmd, $display_cmd) = shift->(0);
621 if ($opts{display}) {
630 =item B<quotify LIST>
632 LIST is a list of strings that are going to be used as arguments for a
633 command, and makes sure to inject quotes and escapes as necessary depending
634 on the content of each string.
636 This can also be used to put quotes around the executable of a command.
637 I<This must never ever be done on VMS.>
644 # Unix setup (default if nothing else is mentioned)
646 sub { $_ = shift; /\s|[\{\}\\\$\[\]\*\?\|\&:;<>]/ ? "'$_'" : $_ };
648 if ( $^O eq "VMS") { # VMS setup
649 $arg_formatter = sub {
651 if (/\s|["[:upper:]]/) {
658 } elsif ( $^O eq "MSWin32") { # MSWin setup
659 $arg_formatter = sub {
661 if (/\s|["\|\&\*\;<>]/) {
670 return map { $arg_formatter->($_) } @_;
673 ######################################################################
674 # private functions. These are never exported.
678 OpenSSL::Test depends on some environment variables.
684 This environment variable is mandatory. C<setup> will check that it's
685 defined and that it's a directory that contains the file C<Configure>.
686 If this isn't so, C<setup> will C<BAIL_OUT>.
690 If defined, its value should be the directory where the openssl application
691 is located. Defaults to C<$TOP/apps> (adapted to the operating system).
695 If defined, its value should be the directory where the test applications
696 are located. Defaults to C<$TOP/test> (adapted to the operating system).
700 If defined, it puts testing in a different mode, where a recipe with
701 failures will result in a C<BAIL_OUT> at the end of its run.
708 $directories{SRCTOP} = $ENV{SRCTOP} || $ENV{TOP};
709 $directories{BLDTOP} = $ENV{BLDTOP} || $ENV{TOP};
710 $directories{BLDAPPS} = $ENV{BIN_D} || __bldtop_dir("apps");
711 $directories{SRCAPPS} = __srctop_dir("apps");
712 $directories{BLDFUZZ} = __bldtop_dir("fuzz");
713 $directories{SRCFUZZ} = __srctop_dir("fuzz");
714 $directories{BLDTEST} = $ENV{TEST_D} || __bldtop_dir("test");
715 $directories{SRCTEST} = __srctop_dir("test");
716 $directories{RESULTS} = $ENV{RESULT_D} || $directories{BLDTEST};
718 push @direnv, "TOP" if $ENV{TOP};
719 push @direnv, "SRCTOP" if $ENV{SRCTOP};
720 push @direnv, "BLDTOP" if $ENV{BLDTOP};
721 push @direnv, "BIN_D" if $ENV{BIN_D};
722 push @direnv, "TEST_D" if $ENV{TEST_D};
723 push @direnv, "RESULT_D" if $ENV{RESULT_D};
725 $end_with_bailout = $ENV{STOPTEST} ? 1 : 0;
729 BAIL_OUT("Must run setup() first") if (! $test_name);
732 return catfile($directories{SRCTOP},@_,$f);
736 BAIL_OUT("Must run setup() first") if (! $test_name);
738 return catdir($directories{SRCTOP},@_);
742 BAIL_OUT("Must run setup() first") if (! $test_name);
745 return catfile($directories{BLDTOP},@_,$f);
749 BAIL_OUT("Must run setup() first") if (! $test_name);
751 return catdir($directories{BLDTOP},@_);
756 if ($^O eq "VMS" ) { # VMS
758 } elsif ($^O eq "MSWin32") { # Windows
761 return $ENV{"EXE_EXT"} || $ext;
765 BAIL_OUT("Must run setup() first") if (! $test_name);
768 $f = catfile($directories{BLDTEST},@_,$f . __exeext());
769 $f = catfile($directories{SRCTEST},@_,$f) unless -x $f;
773 sub __perltest_file {
774 BAIL_OUT("Must run setup() first") if (! $test_name);
777 $f = catfile($directories{BLDTEST},@_,$f);
778 $f = catfile($directories{SRCTEST},@_,$f) unless -f $f;
783 BAIL_OUT("Must run setup() first") if (! $test_name);
786 $f = catfile($directories{BLDAPPS},@_,$f . __exeext());
787 $f = catfile($directories{SRCAPPS},@_,$f) unless -x $f;
792 BAIL_OUT("Must run setup() first") if (! $test_name);
795 $f = catfile($directories{BLDFUZZ},@_,$f . __exeext());
796 $f = catfile($directories{SRCFUZZ},@_,$f) unless -x $f;
800 sub __perlapps_file {
801 BAIL_OUT("Must run setup() first") if (! $test_name);
804 $f = catfile($directories{BLDAPPS},@_,$f);
805 $f = catfile($directories{SRCAPPS},@_,$f) unless -f $f;
810 BAIL_OUT("Must run setup() first") if (! $test_name);
813 return catfile($directories{RESULTS},@_,$f);
817 my $dir = catdir(shift);
819 my $abscurdir = rel2abs(curdir());
820 my $absdir = rel2abs($dir);
821 my $reverse = abs2rel($abscurdir, $absdir);
823 # PARANOIA: if we're not moving anywhere, we do nothing more
824 if ($abscurdir eq $absdir) {
828 # Do not support a move to a different volume for now. Maybe later.
829 BAIL_OUT("FAILURE: \"$dir\" moves to a different volume, not supported")
830 if $reverse eq $abscurdir;
832 # If someone happened to give a directory that leads back to the current,
833 # it's extremely silly to do anything more, so just simulate that we did
835 # In this case, we won't even clean it out, for safety's sake.
836 return "." if $reverse eq "";
838 $dir = canonpath($dir);
843 # We are recalculating the directories we keep track of, but need to save
844 # away the result for after having moved into the new directory.
845 my %tmp_directories = ();
848 # For each of these directory variables, figure out where they are relative
849 # to the directory we want to move to if they aren't absolute (if they are,
850 # they don't change!)
851 my @dirtags = sort keys %directories;
853 if (!file_name_is_absolute($directories{$_})) {
854 my $newpath = abs2rel(rel2abs($directories{$_}), rel2abs($dir));
855 $tmp_directories{$_} = $newpath;
859 # Treat each environment variable that was used to get us the values in
860 # %directories the same was as the paths in %directories, so any sub
861 # process can use their values properly as well
863 if (!file_name_is_absolute($ENV{$_})) {
864 my $newpath = abs2rel(rel2abs($ENV{$_}), rel2abs($dir));
865 $tmp_ENV{$_} = $newpath;
869 # Should we just bail out here as well? I'm unsure.
870 return undef unless chdir($dir);
872 if ($opts{cleanup}) {
873 rmtree(".", { safe => 0, keep_root => 1 });
876 # We put back new values carefully. Doing the obvious
877 # %directories = ( %tmp_irectories )
878 # will clear out any value that happens to be an absolute path
879 foreach (keys %tmp_directories) {
880 $directories{$_} = $tmp_directories{$_};
882 foreach (keys %tmp_ENV) {
883 $ENV{$_} = $tmp_ENV{$_};
887 print STDERR "DEBUG: __cwd(), directories and files:\n";
888 print STDERR " \$directories{BLDTEST} = \"$directories{BLDTEST}\"\n";
889 print STDERR " \$directories{SRCTEST} = \"$directories{SRCTEST}\"\n";
890 print STDERR " \$directories{RESULTS} = \"$directories{RESULTS}\"\n";
891 print STDERR " \$directories{BLDAPPS} = \"$directories{BLDAPPS}\"\n";
892 print STDERR " \$directories{SRCAPPS} = \"$directories{SRCAPPS}\"\n";
893 print STDERR " \$directories{SRCTOP} = \"$directories{SRCTOP}\"\n";
894 print STDERR " \$directories{BLDTOP} = \"$directories{BLDTOP}\"\n";
896 print STDERR " current directory is \"",curdir(),"\"\n";
897 print STDERR " the way back is \"$reverse\"\n";
905 my $exe_shell = shift;
907 my $prefix = __bldtop_file("util", "shlib_wrap.sh")." ";
909 if (defined($exe_shell)) {
910 $prefix = "$exe_shell ";
911 } elsif ($^O eq "VMS" ) { # VMS
912 $prefix = ($prog =~ /^(?:[\$a-z0-9_]+:)?[<\[]/i ? "mcr " : "mcr []");
913 } elsif ($^O eq "MSWin32") { # Windows
917 # We test both with and without extension. The reason
918 # is that we might be passed a complete file spec, with
927 if (defined($prog)) {
928 # Make sure to quotify the program file on platforms that may
929 # have spaces or similar in their path name.
930 # To our knowledge, VMS is the exception where quotifying should
932 ($prog) = quotify($prog) unless $^O eq "VMS";
933 return $prefix.$prog;
936 print STDERR "$prog not found\n";
941 BAIL_OUT("Must run setup() first") if (! $test_name);
944 my $path_builder = shift;
945 # Make a copy to not destroy the caller's array
946 my @cmdarray = ( @{$_[0]} ); shift;
949 # We do a little dance, as $path_builder might return a list of
950 # more than one. If so, only the first is to be considered a
951 # program to fix up, the rest is part of the arguments. This
952 # happens for perl scripts, where $path_builder will return
953 # a list of two, $^X and the script name.
954 # Also, if $path_builder returned more than one, we don't apply
955 # the EXE_SHELL environment variable.
956 my @prog = ($path_builder->(shift @cmdarray));
957 my $first = shift @prog;
958 my $exe_shell = @prog ? undef : $ENV{EXE_SHELL};
959 my $cmd = __fixup_cmd($first, $exe_shell);
961 if ( ! -f $prog[0] ) {
962 print STDERR "$prog[0] not found\n";
966 my @args = (@prog, @cmdarray);
967 if (defined($opts{interpreter_args})) {
968 unshift @args, @{$opts{interpreter_args}};
974 my $null = devnull();
977 $arg_str = " ".join(" ", quotify @args) if @args;
979 my $fileornull = sub { $_[0] ? $_[0] : $null; };
983 my $saved_stderr = undef;
984 $stdin = " < ".$fileornull->($opts{stdin}) if exists($opts{stdin});
985 $stdout= " > ".$fileornull->($opts{stdout}) if exists($opts{stdout});
986 $stderr=" 2> ".$fileornull->($opts{stderr}) if exists($opts{stderr});
988 my $display_cmd = "$cmd$arg_str$stdin$stdout$stderr";
991 unless $stderr || !$ENV{HARNESS_ACTIVE} || $ENV{HARNESS_VERBOSE};
993 $cmd .= "$arg_str$stdin$stdout$stderr";
996 print STDERR "DEBUG[__build_cmd]: \$cmd = \"$cmd\"\n";
997 print STDERR "DEBUG[__build_cmd]: \$display_cmd = \"$display_cmd\"\n";
1000 return ($cmd, $display_cmd);
1005 L<Test::More>, L<Test::Harness>
1009 Richard Levitte E<lt>levitte@openssl.orgE<gt> with assitance and
1010 inspiration from Andy Polyakov E<lt>appro@openssl.org<gt>.