From 5fd47f991a8a04887d1313d287f7ba5ba5fbaefa Mon Sep 17 00:00:00 2001
From: Paul Schweigert <paul@paulschweigert.com>
Date: Fri, 6 Oct 2023 00:57:10 -0400
Subject: [PATCH 1/2] remove duplicate LIBOQS_BRANCH option in config doc
 (#274)

Signed-off-by: Paul S. Schweigert <paul@paulschweigert.com>

There were two entries for LIBOQS_BRANCH in the CONFIGURE doc. This
change drops the second one and makes a slight tweak to the wording of
the first.
---
 CONFIGURE.md | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/CONFIGURE.md b/CONFIGURE.md
index b1718b9b..416bfb88 100644
--- a/CONFIGURE.md
+++ b/CONFIGURE.md
@@ -110,8 +110,8 @@ code deficiencies related to providers in such old OpenSSL branches.
 
 This defines the branch of `liboqs` against which `oqs-provider` is built.
 This can be used, for example, to facilitate a release of `oqsprovider`
-to track an old/stable `liboqs` release.
-Default is "main" (most current code).
+to track an old/stable `liboqs` release. If this variable is not set, the
+"main" branch is built.
 
 ### liboqs_DIR
 
@@ -120,11 +120,6 @@ used from the directory specified in this variable: Both `include`
 and `lib` directories must be present in that location.
 By not setting this variable, `liboqs` is build from source.
 
-### LIBOQS_BRANCH
-
-If set, this environment variable designates the `liboqs` branch to
-be built. If this variable is not set, the "main" branch is built.
-
 ### MAKE_PARAMS
 
 This environment variable permits passing parameters to the `make`

From 9bb30016e44a84e199074d3bc01463e3db9f2295 Mon Sep 17 00:00:00 2001
From: Michael Baentsch <57787676+baentsch@users.noreply.github.com>
Date: Tue, 10 Oct 2023 19:20:30 +0200
Subject: [PATCH 2/2] add cloudflare interop tests (#278)

---
 scripts/oqsprovider-externalinterop.sh | 26 ++++++++++++++++++++++++++
 scripts/runtests.sh                    |  4 ++++
 2 files changed, 30 insertions(+)
 create mode 100755 scripts/oqsprovider-externalinterop.sh

diff --git a/scripts/oqsprovider-externalinterop.sh b/scripts/oqsprovider-externalinterop.sh
new file mode 100755
index 00000000..d90dff68
--- /dev/null
+++ b/scripts/oqsprovider-externalinterop.sh
@@ -0,0 +1,26 @@
+#!/bin/bash
+
+set -e 
+
+# Use newly built oqsprovider to test interop with external sites
+
+if [ -z "$OPENSSL_APP" ]; then
+    echo "OPENSSL_APP env var not set. Exiting."
+    exit 1
+fi
+
+if [ -z "$OPENSSL_MODULES" ]; then
+    echo "Warning: OPENSSL_MODULES env var not set."
+fi
+
+# Set OSX DYLD_LIBRARY_PATH if not already externally set
+if [ -z "$DYLD_LIBRARY_PATH" ]; then
+    export DYLD_LIBRARY_PATH=$LD_LIBRARY_PATH
+fi
+
+echo " Cloudflare:"
+export OQS_CODEPOINT_X25519_KYBER512=65072
+(echo -e "GET /cdn-cgi/trace HTTP/1.1\nHost: cloudflare.com\n\n"; sleep 1; echo $'\cc') | $OPENSSL_APP s_client -connect pq.cloudflareresearch.com:443 -groups x25519_kyber768 -servername cloudflare.com -ign_eof 2>/dev/null | grep kex=X25519Kyber768Draft00
+(echo -e "GET /cdn-cgi/trace HTTP/1.1\nHost: cloudflare.com\n\n"; sleep 1; echo $'\cc') | $OPENSSL_APP s_client -connect pq.cloudflareresearch.com:443 -groups x25519_kyber512 -servername cloudflare.com -ign_eof 2>/dev/null | grep kex=X25519Kyber512Draft00
+
+
diff --git a/scripts/runtests.sh b/scripts/runtests.sh
index 8d7d02d5..79762205 100755
--- a/scripts/runtests.sh
+++ b/scripts/runtests.sh
@@ -180,6 +180,10 @@ fi
 
 echo
 
+# Run interop tests with external sites
+echo "External interop tests commencing"
+${OQS_PROVIDER_TESTSCRIPTS}/oqsprovider-externalinterop.sh
+
 # Run built-in tests:
 # Without removing OPENSSL_CONF ctest hangs... ???
 unset OPENSSL_CONF