test: skip tls-deprecated secp256k1 on OpenSSL 4.0

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: #62805
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>

Author: panva

test/parallel/test-tls-ecdh-multiple.js

@@ -8,7 +8,7 @@ if (!common.hasCrypto) {
 common.skip('missing crypto');
 }
 
-const{ opensslCli }=require('../common/crypto');
+const{ opensslCli, hasOpenSSL}=require('../common/crypto');
 constcrypto=require('crypto');
 
 if(!opensslCli){
@@ -24,11 +24,17 @@ function loadPEM(n) {
 returnfixtures.readKey(`${n}.pem`);
 }
 
+// OpenSSL 4.0 disables support for deprecated elliptic curves from RFC 8422
+// (including secp256k1) by default.
+constecdhCurve=hasOpenSSL(4,0) ?
+'prime256v1:secp521r1' :
+'secp256k1:prime256v1:secp521r1';
+
 constoptions={
 key: loadPEM('agent2-key'),
 cert: loadPEM('agent2-cert'),
 ciphers: '-ALL:ECDHE-RSA-AES128-SHA256',
-ecdhCurve: 'secp256k1:prime256v1:secp521r1',
+ ecdhCurve,
 maxVersion: 'TLSv1.2',
 };
 
@@ -60,6 +66,11 @@ const server = tls.createServer(options, (conn) => {
 unsupportedCurves.push('brainpoolP256r1');
 }
 
+// Deprecated RFC 8422 curves are disabled by default in OpenSSL 4.0.
+if(hasOpenSSL(4,0)){
+unsupportedCurves.push('secp256k1');
+}
+
 unsupportedCurves.forEach((ecdhCurve)=>{
 assert.throws(()=>tls.createServer({ ecdhCurve }),
 /Error:FailedtosetECDHcurve/);