Commit 8db9d00732 for strongswan.org

commit 8db9d007328205d404cb80c0956e5cbdf0356aaf
Author: Tobias Brunner <tobias@strongswan.org>
Date:   Wed Sep 2 07:43:00 2026 +0200

    github: Use AWS-LC 5.7.0 for tests

    Now supports the Brainpool curves.

diff --git a/.github/active-transforms/openssl-awslc b/.github/active-transforms/openssl-awslc
index b54be9ebc9..e5f6ac32dc 100644
--- a/.github/active-transforms/openssl-awslc
+++ b/.github/active-transforms/openssl-awslc
@@ -95,4 +95,8 @@ ECP_256[openssl]
 ECP_384[openssl]
 ECP_521[openssl]
 ECP_224[openssl]
+ECP_256_BP[openssl]
+ECP_384_BP[openssl]
+ECP_512_BP[openssl]
+ECP_224_BP[openssl]
 CURVE_25519[openssl]
diff --git a/scripts/test.sh b/scripts/test.sh
index 3de7320bab..fd9b40fd12 100755
--- a/scripts/test.sh
+++ b/scripts/test.sh
@@ -123,7 +123,7 @@ build_openssl()

 build_awslc()
 {
-	LC_REV=5.3.0
+	LC_REV=5.7.0
 	LC_PKG=aws-lc-$LC_REV
 	LC_DIR=$DEPS_BUILD_DIR/$LC_PKG
 	LC_SRC=https://github.com/aws/aws-lc/archive/refs/tags/v${LC_REV}.tar.gz
diff --git a/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c b/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c
index c7ef7e1f52..f89fedc9ea 100644
--- a/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c
+++ b/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c
@@ -290,7 +290,7 @@ int openssl_ecdh_group_to_nid(key_exchange_method_t group)
 		case ECP_521_BIT:
 			return NID_secp521r1;
 /* added with 1.0.2 */
-#if OPENSSL_VERSION_NUMBER >= 0x10002000L
+#if OPENSSL_VERSION_NUMBER >= 0x10002000L || defined(OPENSSL_IS_AWSLC)
 		case ECP_224_BP:
 			return NID_brainpoolP224r1;
 		case ECP_256_BP:
diff --git a/src/libstrongswan/plugins/openssl/openssl_plugin.c b/src/libstrongswan/plugins/openssl/openssl_plugin.c
index a12e2ba8fc..60089684b8 100644
--- a/src/libstrongswan/plugins/openssl/openssl_plugin.c
+++ b/src/libstrongswan/plugins/openssl/openssl_plugin.c
@@ -687,7 +687,7 @@ METHOD(plugin_t, get_features, int,
 			PLUGIN_PROVIDE(KE, ECP_521_BIT),
 			PLUGIN_PROVIDE(KE, ECP_224_BIT),
 			PLUGIN_PROVIDE(KE, ECP_192_BIT),
-#if OPENSSL_VERSION_NUMBER >= 0x10002000L
+#if OPENSSL_VERSION_NUMBER >= 0x10002000L || defined(OPENSSL_IS_AWSLC)
 			PLUGIN_PROVIDE(KE, ECP_256_BP),
 			PLUGIN_PROVIDE(KE, ECP_384_BP),
 			PLUGIN_PROVIDE(KE, ECP_512_BP),