test: update TLS tests for OpenSSL 3.2

Update the following TLS tests to account for error code changes
in OpenSSL 3.2 and later.
- `parallel/test-tls-empty-sni-context`
- `parallel/test-tls-psk-circuit`
PR-URL: #53384
Refs: #53382
Refs: openssl/openssl#19950
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
Reviewed-By: Yagiz Nizipli <yagiz.nizipli@sentry.io>

Author: richardlau

test/common/index.js

@@ -63,6 +63,9 @@ const hasOpenSSL3 = hasCrypto &&
 consthasOpenSSL31=hasCrypto&&
 require('crypto').constants.OPENSSL_VERSION_NUMBER>=0x30100000;
 
+consthasOpenSSL32=hasCrypto&&
+require('crypto').constants.OPENSSL_VERSION_NUMBER>=0x30200000;
+
 consthasQuic=hasCrypto&&!!process.config.variables.openssl_quic;
 
 functionparseTestFlags(filename=process.argv[1]){
@@ -968,6 +971,7 @@ const common = {
  hasCrypto,
  hasOpenSSL3,
  hasOpenSSL31,
+ hasOpenSSL32,
  hasQuic,
  hasMultiLocalhost,
  invalidArgTypeHelper,

test/parallel/test-tls-empty-sni-context.js

@@ -26,6 +26,8 @@ const server = tls.createServer(options, (c) => {
 },common.mustNotCall());
 
 c.on('error',common.mustCall((err)=>{
-assert.strictEqual(err.code,'ERR_SSL_SSLV3_ALERT_HANDSHAKE_FAILURE');
+constexpectedErr=common.hasOpenSSL32 ?
+'ERR_SSL_SSL/TLS_ALERT_HANDSHAKE_FAILURE' : 'ERR_SSL_SSLV3_ALERT_HANDSHAKE_FAILURE';
+assert.strictEqual(err.code,expectedErr);
 }));
 }));

test/parallel/test-tls-psk-circuit.js

@@ -62,9 +62,11 @@ test({ psk: USERS.UserA, identity: 'UserA' }, { minVersion: 'TLSv1.3' });
 test({psk: USERS.UserB,identity: 'UserB'});
 test({psk: USERS.UserB,identity: 'UserB'},{minVersion: 'TLSv1.3'});
 // Unrecognized user should fail handshake
-test({psk: USERS.UserB,identity: 'UserC'},{},
-'ERR_SSL_SSLV3_ALERT_HANDSHAKE_FAILURE');
+constexpectedHandshakeErr=common.hasOpenSSL32 ?
+'ERR_SSL_SSL/TLS_ALERT_HANDSHAKE_FAILURE' : 'ERR_SSL_SSLV3_ALERT_HANDSHAKE_FAILURE';
+test({psk: USERS.UserB,identity: 'UserC'},{},expectedHandshakeErr);
 // Recognized user but incorrect secret should fail handshake
-test({psk: USERS.UserA,identity: 'UserB'},{},
-'ERR_SSL_SSLV3_ALERT_ILLEGAL_PARAMETER');
+constexpectedIllegalParameterErr=common.hasOpenSSL32 ?
+'ERR_SSL_SSL/TLS_ALERT_ILLEGAL_PARAMETER' : 'ERR_SSL_SSLV3_ALERT_ILLEGAL_PARAMETER';
+test({psk: USERS.UserA,identity: 'UserB'},{},expectedIllegalParameterErr);
 test({psk: USERS.UserB,identity: 'UserB'});