Repository navigation
Fix the FIPS v5 PRB build and test failures #1371
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: wolfPKCS11 Build Tests | |
| on: | |
| push: | |
| branches: [ 'master', 'main', 'release/**' ] | |
| pull_request: | |
| branches: [ '*' ] | |
| jobs: | |
| defaults_all: | |
| uses: ./.github/workflows/build-workflow.yml | |
| single_theaded: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-singlethreaded | |
| aesecb: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-aesecb | |
| aescmac: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-aescmac | |
| wolfssl_config: --enable-cmac | |
| tpm: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-singlethreaded --enable-wolftpm --disable-dh C_EXTRA_FLAGS="-DWOLFPKCS11_TPM_STORE" | |
| check: ./tests/pkcs11str && ./tests/pkcs11test && ./tests/rsa_session_persistence_test | |
| tpm_debug: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-singlethreaded --enable-wolftpm --disable-dh --enable-debug C_EXTRA_FLAGS="-DWOLFPKCS11_TPM_STORE" | |
| check: ./tests/token_store_test | |
| tpm_no_store: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-singlethreaded --enable-wolftpm --disable-dh CFLAGS="-DWOLFPKCS11_NO_STORE" | |
| check: ./tests/pkcs11str && ./tests/pkcs11test | |
| no_rsa: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-rsa | |
| no_rsaoaep: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-rsaoaep | |
| no_rsapss: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-rsapss | |
| no_ecc: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-ecc | |
| no_dh: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-dh | |
| no_keygen: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-keygen | |
| no_keystore: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: CFLAGS="-DWOLFPKCS11_NO_STORE" | |
| no_keystore_debug: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-debug CFLAGS="-DWOLFPKCS11_NO_STORE" | |
| no_keystore_nss: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-nss CFLAGS="-DWOLFPKCS11_NO_STORE" | |
| no_keystore_pqc: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-mldsa --enable-mlkem --enable-lms --enable-xmss CFLAGS="-DWOLFPKCS11_NO_STORE" | |
| no_env: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: C_EXTRA_FLAGS="-DWOLFPKCS11_NO_ENV" --with-default-token-path=./store/default | |
| check: mkdir -p store && ./tests/pkcs11test | |
| no_aescbc: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-aescbc | |
| no_aesgcm: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-aesgcm | |
| no_sha512: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-sha512 | |
| no_sha384: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-sha384 | |
| no_sha224: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-sha224 | |
| no_sha3: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-sha3 | |
| no_sha1: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-sha1 | |
| no_md5: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-md5 | |
| no_hmac: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-hmac --disable-hkdf | |
| no_concatenate: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-concatenate | |
| no_derive_length_guard: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-derive-length-guard | |
| no_derive_secret_key: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --disable-ecc --disable-dh --disable-hkdf --disable-aescbc --disable-concatenate | |
| wolfssl_config: --enable-cryptonly --disable-crypttests --disable-examples | |
| wolfssl_cflags: -DNO_KDF | |
| with_nss: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-nss | |
| pbkdf2: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-pbkdf2 --with-pbkdf2-iterations=1000 | |
| pkcs11v3only: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-pkcs11v30 --disable-pkcs11v32 | |
| pkcs11v32: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-pkcs11v32 | |
| pkcs11v32-static: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-pkcs11v32 --disable-shared | |
| mldsa: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-mldsa | |
| mlkem: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-mlkem | |
| lms: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-lms | |
| xmss: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-xmss | |
| lms_xmss: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-lms --enable-xmss | |
| lms_xmss_static: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-lms --enable-xmss --disable-shared | |
| debug: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --enable-debug | |
| default_token_path: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: --with-default-token-path=./store/default_token_path | |
| # Build the library, examples and tests as C++ to catch regressions in | |
| # C++ compatibility (e.g. missing void* casts, enum-from-int conversions, | |
| # use of the "template" keyword, C99 compound literals). -Werror=narrowing | |
| # promotes the int->CK_ULONG narrowing warning to an error so it is caught | |
| # under GCC as well (clang already treats it as an error). | |
| cpp_build: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: CC=g++ C_EXTRA_FLAGS="-Werror=narrowing" | |
| # The same C++ build with --enable-debug, which adds the debug-only test | |
| # hooks and the tests that declare them. Those declarations need | |
| # extern "C" to match the library's C linkage, or the tests fail to link. | |
| cpp_debug_build: | |
| uses: ./.github/workflows/build-workflow.yml | |
| with: | |
| config: CC=g++ C_EXTRA_FLAGS="-Werror=narrowing" --enable-debug | |
| wolfssl_v5_6_6: | |
| uses: ./.github/workflows/wolfssl-v5.6.6-build-workflow.yml | |
| #TODO: --disable-aes Enable AES (default: enabled) | |
| #TODO: --disable-sha256 Enable SHA-256 (default: enabled) |