handle openssl3 error in ssl tests

[radez]

Using OpenSSL 3, the expected error string caught in ssl tests has changed.
E AssertionError: assert 'wrong version number' in '[SSL] record layer failure (_ssl.c:1000)'

This is already handled for OpenSSL pre-1.1 and gte-1.1, adding handling for OpenSSL 3+

Fixes: #645

❓ What kind of change does this PR introduce?

• 🐞 bug fix
• 🐣 feature
• 📋 docs update
• 📋 tests/coverage improvement
• 📋 refactoring
• 💥 other

📋 Contribution checklist:

(If you're a first-timer, check out
this guide on making great pull requests)

• I wrote descriptive pull request text above
• I think the code is well written
• I wrote good commit messages
• I have squashed related commits together after
  the changes have been approved
• Unit tests for the changes exist
• Integration tests for the changes exist (if applicable)
• I used the same coding conventions as the rest of the project
• The new code doesn't generate linter offenses
• Documentation reflects the changes
• The PR relates to only one subject with a clear title
  and description in grammatically correct, complete sentences

---

This change is 

[codecov]

Codecov Report

❌ Patch coverage is 66.66667% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 83.56%. Comparing base (41584b8) to head (b7e089b).
⚠️ Report is 610 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #655      +/-   ##
==========================================
- Coverage   83.58%   83.56%   -0.02%     
==========================================
  Files          28       28              
  Lines        4172     4174       +2     
==========================================
+ Hits         3487     3488       +1     
- Misses        685      686       +1     

[radez]

Hm, test results suggest maybe I'm not making the correct check here to resolve this.
I'll do some more research to see if I can clarify.

[webknjaz]

Any ideas on how to test both variants in CI?

[radez]

Any ideas on how to test both variants in CI?

I believe this was a change in openssl 3.2.
You can see in fedora where F40 and rawhide are 3.2 and are the builds that are failing.
https://packages.fedoraproject.org/pkgs/openssl/openssl/
I've update the patch to check for openssl 3.2 and I believe this has resolved testing for the correct variants in the correct cases.

[webknjaz]

Perhaps, it's time to integrate Packit..

[radez]

Yup, probably not a bad idea.