How can they know that they have not broken something in their flensing without any automated testing since no tests is one of the big problems with OpenSSL?
Believe it or not, there are other ways to spot problems besides automated testing, which wouldn't catch every problem anyway (that's why we need human audits like the one OpenBSD is doing).
Yes, software existed before TDD and ADHD.
That's not to say tests don't help. If you are interested, why don't you contribute?
How can they know that they have not broken something in their flensing without any automated testing since no tests is one of the big problems with OpenSSL?