wolfPKCS11/.github/workflows/build-workflow.yml at master · wolfSSL/wolfPKCS11 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
name: wolfPKCS11 Build Workflow

on:

    workflow_call:
      inputs:
        config:
          required: false
          type: string
        check:
          required: false
          type: string
          default: 'make check'
        wolfssl_config:
          required: false
          type: string
          default: ''
        wolfssl_cflags:
          required: false
          type: string
          default: ''

jobs:
  build:

    runs-on: ubuntu-latest
    timeout-minutes: 30

    steps:
#pull wolfPKCS11
    - uses: actions/checkout@v4
      with:
        submodules: true

#setup wolfssl
    - uses: actions/checkout@v4
      with:
        repository: wolfssl/wolfssl
        path: wolfssl
    - name: wolfssl autogen
      working-directory: ./wolfssl
      run: ./autogen.sh
    - name: wolfssl configure
      working-directory: ./wolfssl
      run: |
        ./configure --enable-cryptocb --enable-aescfb --enable-rsapss --enable-keygen --enable-pwdbased --enable-scrypt --enable-md5 \
            --enable-mldsa --enable-lms=verify-only --enable-xmss=verify-only ${{inputs.wolfssl_config}} \
            C_EXTRA_FLAGS="-DWOLFSSL_PUBLIC_MP -DWC_RSA_DIRECT -DHAVE_AES_ECB -DHAVE_AES_KEYWRAP ${{inputs.wolfssl_cflags}}"
    - name: wolfssl make
      working-directory: ./wolfssl
      run: make
    - name: wolfssl make install
      working-directory: ./wolfssl
      run: |
          sudo make install
          sudo ldconfig

#setup ibmswtpm2
    - uses: actions/checkout@v4
      with:
        repository: kgoldman/ibmswtpm2
        path: ibmswtpm2
    - name: ibmswtpm2 make
      working-directory: ./ibmswtpm2/src
      run: |
          make
          ./tpm_server &

#setup wolftpm
    - uses: actions/checkout@v4
      with:
        repository: wolfssl/wolftpm
        path: wolftpm
    - name: wolftpm autogen
      working-directory: ./wolftpm
      run: ./autogen.sh
    - name: wolftpm configure
      working-directory: ./wolftpm
      run: |
        ./configure --enable-swtpm
    - name: wolftpm make
      working-directory: ./wolftpm
      run: make
    - name: wolftpm make install
      working-directory: ./wolftpm
      run: |
          sudo make install
          sudo ldconfig

#setup wolfPKCS11
    - name: wolfpkcs11 autogen
      run: ./autogen.sh
    - name: wolfpkcs11 configure
      run: ./configure ${{inputs.config}}
    - name: wolfpkcs11 make
      run: make
    - name: wolfpkcs11 make check
      run: ${{inputs.check}}
    - name: wolfpkcs11 make install
      run: sudo make install
    - name: wolfpkcs11 make dist
      run: make dist


# capture logs on failure
    - name: Upload failure logs
      if: failure() || cancelled()
      uses: actions/upload-artifact@v4
      with:
        name: wolfpkcs11-test-logs
        path: |
          test-suite.log
        retention-days: 5