Add OpenSSL compat: BIO_get_new_index, i2d_PUBKEY_bio, OpenSSL_version

[Roy-Carter]

Description

As part of the continuous of the integration of openssl to wolfssl i've come across a few missing functions needed for OpenSSL-compat APIs: BIO_get_new_index() (unique custom BIO type IDs, 128–255), i2d_PUBKEY_bio() (write public-key DER to a BIO), and OpenSSL_version(type) handling for the six standard OPENSSL_* selector constants (plus unknown → version string). Headers/macros updated under OPENSSL_EXTRA / !NO_BIO as appropriate.

Testing

Ran ./tests/unit.test with -~BIO_get_new_index, -~OpenSSL_version, and -~i2d_PUBKEY_bio (substring filters). All passed.

Checklist

• [*] added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Roy-Carter]

@julek-wolfssl can you please run the workflow on this ?

[wolfSSL-Bot]

Can one of the admins verify this patch?

[dgarske]

Okay to test. Contributor agreement on file.

[github-actions]

MemBrowse Memory Report

gcc-arm-cortex-m4-openssl-compat

• FLASH: .rodata +160 B, .text +128 B (+0.0%, 771,316 B / 1,048,576 B, total: 74% used)
• RAM: .data +8 B (+0.0%, 136,944 B / 262,144 B, total: 52% used)
  No memory changes detected for:
• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• linuxkm-pie
• stm32-sim-stm32h753

[Roy-Carter]

hey @julek-wolfssl would you mind checking why the packaging test failed ? looks like a false positive , I don't see any errors there on the log regarding the build process of wolfssl which can relate to my code , or maybe I missed something

[dgarske]

�[1;38;5;243m--enable-leantls --enable-session-ticket --enable-sni --enable-opensslextra
  Testing DEFAULT: --enable-leantls --enable-session-ticket --enable-sni --enable-opensslextra --disable-shared
  Configure RESULT = 0
  
  make[2]: warning: -j9 forced in submake: resetting jobserver mode.
  /usr/bin/ld: tests/unit_test-api.o: in function `test_wolfSSL_i2d_PUBKEY_bio':
  api.c:(.text+0xcb74): undefined reference to `wolfSSL_i2d_PUBKEY_bio'
  /usr/bin/ld: api.c:(.text+0xcbc9): undefined reference to `wolfSSL_i2d_PUBKEY_bio'

  collect2: error: ld returned 1 exit status
  make[2]: *** [Makefile:7709: tests/unit.test] Error 1
  make[1]: *** [Makefile:11517: all-recursive] Error 1

[Roy-Carter]

@dgarske @julek-wolfssl can we re-test ? fixed build errors

[julek-wolfssl]

Retest this please.

[Roy-Carter]

openvpn test failed due to what seems like diffs from master and not my code , i rebased to master can we re-run workflow @julek-wolfssl

[Roy-Carter]

@julek-wolfssl @dgarske can we re-run workflows ? there was a conflict on two of the test files

[dgarske]

Jenkins retest this please

[julek-wolfssl]

Please rebase before pushing to this branch.

[Roy-Carter]

@julek-wolfssl not sure what it is but error is not recreating locally but i just rebased :

Also , regarding our ticket of Cato I see for some reason I don't have an access to it and I wrote a few extra messages there but not sure if it got to you . can you check ?

PASS: testsuite/testsuite.test
PASS: scripts/unit.test
============================================================================
Testsuite summary for wolfssl 5.9.1
============================================================================
# TOTAL: 21
# PASS:  16
# SKIP:  5
# XFAIL: 0
# FAIL:  0
# XPASS: 0
# ERROR: 0
============================================================================
make[4]: Leaving directory '/home/roy/Desktop/wolfssl'
make[3]: Leaving directory '/home/roy/Desktop/wolfssl'
make[2]: Leaving directory '/home/roy/Desktop/wolfssl'
make[1]: Leaving directory '/home/roy/Desktop/wolfssl'
root@roycart-LL-IL:/home/roy/Desktop/wolfssl# 

[julek-wolfssl]

@Roy-Carter
I think you can gate that specific test on OPENSSL_COEXIST. Its picking up the system libssl and we can skip that test when actually using libssl.

[julek-wolfssl]

@Roy-Carter The exact test failing is test_wolfSSL_OpenSSL_version

[julek-wolfssl]

Hi @Roy-Carter, would you like me to make the final changes on this PR?

[Roy-Carter]

Hey @julek-wolfssl , yes that'll be great. unfortunately I'm filled up with work so I didn't manage to get into these here . If you can please take over the other 2 also (AFAIK there were okay, just minor test fixes)
All the code is already integrate on our side for now .

Much appreciated !

[Copilot]

Pull request overview

Copilot reviewed 10 out of 10 changed files in this pull request and generated no new comments.