test: make ssl/xrpc tests work with OpenResty 1.29.2.4 runtime

t/ssl.t TEST 3 and TEST 5 assert error messages emitted by our own
lua-resty-core-tlshandshake patch, whose wording differs between the
OpenResty 1.21.x patch and the 1.29.2.4 patch. Detect the running
openresty version via 'nginx -v' and assert the exact message for that
version instead of a loose regex, so a wrong-message regression is still
caught.

xrpc downstream/upstream tests assert stream-lua internal
buffer-allocation debug logs that changed in stream-lua 0.0.19
(OpenResty 1.29.2.4); exclude them on apisix-runtime only.

Author: AlinsRan

.github/workflows/ci.yml

@@ -15,7 +15,10 @@ jobs:
           - name: apisix-runtime
             script_url: "https://raw.githubusercontent.com/api7/apisix-build-tools/master/build-apisix-runtime.sh"
             script_name: "build-apisix-runtime.sh"
-            exclude_tests: ""
+            # These assert stream-lua internal buffer-allocation debug logs that
+            # changed in OpenResty 1.29.2.4 (stream-lua 0.0.19); they still run on
+            # api7ee-runtime (OR 1.21, stream-lua 0.0.16) for functional coverage.
+            exclude_tests: "t/stream/xrpc/downstream.t t/stream/xrpc/upstream.t"
           - name: api7ee-runtime
             script_url: "https://raw.githubusercontent.com/api7/apisix-build-tools/release/api7ee-runtime/build-api7ee-runtime.sh"
             script_name: "build-api7ee-runtime.sh"

t/ssl.t

@@ -4,6 +4,21 @@ log_level('debug');
 no_root_location();
 no_long_string();
 
+# Error messages emitted by our lua-resty-core-tlshandshake patch were
+# reworded in OpenResty 1.29.2.4. Detect the running version once and pick
+# the exact expected message, so a wrong-message regression is still caught.
+my $nginx_binary = $ENV{'TEST_NGINX_BINARY'} || 'nginx';
+my $version = eval { `$nginx_binary -V 2>&1` };
+my ($major, $minor) = $version =~ m{openresty/(\d+)\.(\d+)};
+my $reworded = ($major > 1 or ($major == 1 and $minor >= 29));
+
+$::err_cert_both_set = $reworded
+    ? "client_cert_path and client_cert cannot both be set"
+    : "client client_cert_path and client_cert both setting";
+$::err_bad_cert_path_type = $reworded
+    ? "bad client_cert_path option type"
+    : "bad client_cert option type";
+
 add_block_preprocessor(sub {
     my ($block) = @_;
 
@@ -186,8 +201,8 @@ location /t {
     }
 }
 --- error_code: 500
---- error_log
-client client_cert_path and client_cert both setting
+--- error_log eval
+$::err_cert_both_set
 
 
 
@@ -275,5 +290,5 @@ location /t {
     }
 }
 --- error_code: 500
---- error_log
-bad client_cert option type
+--- error_log eval
+$::err_bad_cert_path_type