pr9780_0002-Teach-TLSProxy-how-to-parse-CertificateRequest-messa.patch only: Two tests fail during binary build: not ok 30 - Extensions count mismatch (1, 2) not ok 6 - status_request handshake with client auth test This tells me all the other tests add tests for functionality that is exists and is ok in bare openssl-1.1.1 while only two tests actually test for the fixed function. pr9780_0001-Don-t-send-a-status_request-extension-in-a-Certifica.patch only: All tests pass during binary build. Not surprising but does confirm that there was no test for the non-RFC compliant functionality that we are trying to fix. pr9780_0002-Teach-TLSProxy-how-to-parse-CertificateRequest-messa.patch + pr9780_0001-Don-t-send-a-status_request-extension-in-a-Certifica.patch: All tests pass during binary build. This tells me the fix does its job according to the tests that were backported from pr9780. Also the manual test of the fix documented in the lp 1940141 bug description above also works. pr9780_0002-Teach-TLSProxy-how-to-parse-CertificateRequest-messa.patch + pr9780_0001-Don-t-send-a-status_request-extension-in-a-Certifica.patch + lp1940141-make-pr-9780-optional.patch: Two tests fail during binary build: not ok 30 - Extensions count mismatch (1, 2) not ok 6 - status_request handshake with client auth test Not surprising as this should be functionally equivalent to pr9780_0001-only above. pr9780_0002-Teach-TLSProxy-how-to-parse-CertificateRequest-messa.patch + pr9780_0001-Don-t-send-a-status_request-extension-in-a-Certifica.patch + lp1940141-make-pr-9780-optional.patch + lp1940141-fix-tests-accordingly.patch: All tests pass during binary build.