zuul: add an mbedtls3 CI job

Closes #7544

scripts/zuul/before_script.sh

@@ -96,6 +96,14 @@ if [ "$TRAVIS_OS_NAME" = linux -a "$OPENSSL3" ]; then
   make install_sw
 fi
 
+if [ "$TRAVIS_OS_NAME" = linux -a "$MBEDTLS3" ]; then
+  cd $HOME
+  git clone --depth=1 -b v3.0.0 https://github.com/ARMmbed/mbedtls
+  cd mbedtls
+  make
+  make DESTDIR=$HOME/mbedtls3 install
+fi
+
 if [ "$TRAVIS_OS_NAME" = linux -a "$LIBRESSL" ]; then
   cd $HOME
   git clone --depth=1 -b v3.1.4 https://github.com/libressl-portable/portable.git libressl-git

zuul.d/jobs.yaml

@@ -245,6 +245,24 @@
         LD_LIBRARY_PATH: "{{ ansible_user_dir }}/openssl3/lib64:/usr/local/lib"
         TFLAGS: https ftps
 
+- job:
+    name: curl-debug-mbedtls3
+    parent: curl-base
+    vars:
+      curl_apt_packages:
+        - libpsl-dev
+        - libbrotli-dev
+        - libzstd-dev
+      curl_env:
+        CC: gcc-8
+        CXX: g++-8
+        T: debug
+        MBEDTLS3: "yes"
+        C: >-
+          --with-mbedtls={{ ansible_user_dir }}/mbedtls3
+        LD_LIBRARY_PATH: "{{ ansible_user_dir }}/mbedtls3/lib:/usr/local/lib"
+        TFLAGS: https ftps
+
 - job:
     name: curl-debug-mesalink
     parent: curl-base
@@ -545,6 +563,7 @@
       - curl-novalgrind-ngtcp2-gnutls
       - curl-debug-wolfssl
       - curl-debug-openssl3
+      - curl-debug-mbedtls3
       - curl-debug-mesalink
       - curl-debug-clang-with-openssl
       - curl-debug-clang-disable-alt-svc-with-openssl