mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-07-06 12:30:49 +02:00
Juliusz Sosinowicz
844852202b
GitHub Actions now emits "Node.js 20 actions are deprecated" warnings: actions are forced to Node.js 24 by default starting 2026-06-16, and Node.js 20 is removed from the runners on 2026-09-16. Update every JavaScript action referenced by the workflows and the local composite actions to the lowest release that runs on Node.js 24: actions/checkout v4 -> v5 actions/checkout (SHA pin) v4.1.7 -> v5 actions/upload-artifact v4 -> v6 (v5 still Node.js 20) actions/download-artifact v4 -> v7 (v5/v6 still Node.js 20) actions/cache[/restore|/save] v4 -> v5 actions/setup-python v5 -> v6 actions/github-script v7 -> v8 docker/setup-buildx-action v3 -> v4 docker/build-push-action v5 -> v7 (v6 still Node.js 20) docker/login-action v3 -> v4 microsoft/setup-msbuild v2 -> v3 open-watcom/setup-watcom v0 -> v1 Actions already running on Node.js 24 (jwlawson/actions-setup-cmake, shogo82148/actions-setup-perl, msys2/setup-msys2, dorny/paths-filter) are left unchanged. These bumps are runtime-only; no workflow uses an input or output removed by the new majors, and v4-format artifacts remain compatible across the upload v6 / download v7 backends.
107 lines
3.4 KiB
YAML
107 lines
3.4 KiB
YAML
name: Kerberos 5 Tests
|
|
|
|
# START OF COMMON SECTION
|
|
on:
|
|
push:
|
|
branches: [ 'release/**' ]
|
|
pull_request:
|
|
types: [opened, synchronize, reopened, ready_for_review]
|
|
branches: [ '*' ]
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
# END OF COMMON SECTION
|
|
|
|
jobs:
|
|
build_wolfssl:
|
|
name: Build wolfSSL
|
|
# Just to keep it the same as the testing target
|
|
if: ${{ (github.repository_owner == 'wolfssl') && (github.event_name != 'pull_request' || github.event.pull_request.draft == false) }}
|
|
runs-on: ubuntu-22.04
|
|
# This should be a safe limit for the tests to run.
|
|
timeout-minutes: 5
|
|
steps:
|
|
- name: workaround high-entropy ASLR
|
|
# not needed after either an update to llvm or runner is done
|
|
run: sudo sysctl vm.mmap_rnd_bits=28
|
|
|
|
- name: Build wolfSSL
|
|
uses: wolfSSL/actions-build-autotools-project@v1
|
|
with:
|
|
path: wolfssl
|
|
configure: --enable-krb CC='gcc -fsanitize=address'
|
|
install: true
|
|
|
|
- name: tar build-dir
|
|
run: tar -zcf build-dir.tgz build-dir
|
|
|
|
- name: Upload built lib
|
|
uses: actions/upload-artifact@v6
|
|
with:
|
|
name: wolf-install-krb5
|
|
path: build-dir.tgz
|
|
retention-days: 5
|
|
|
|
krb5_check:
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
# List of releases to test
|
|
ref: [ 1.21.1 ]
|
|
name: ${{ matrix.ref }}
|
|
if: ${{ (github.repository_owner == 'wolfssl') && (github.event_name != 'pull_request' || github.event.pull_request.draft == false) }}
|
|
runs-on: ubuntu-22.04
|
|
# This should be a safe limit for the tests to run.
|
|
timeout-minutes: 8
|
|
needs: build_wolfssl
|
|
steps:
|
|
- name: Download lib
|
|
uses: actions/download-artifact@v7
|
|
with:
|
|
name: wolf-install-krb5
|
|
|
|
- name: untar build-dir
|
|
run: tar -xf build-dir.tgz
|
|
|
|
- name: Checkout OSP
|
|
uses: actions/checkout@v5
|
|
with:
|
|
repository: wolfssl/osp
|
|
path: osp
|
|
fetch-depth: 1
|
|
|
|
- name: Checkout krb5
|
|
uses: actions/checkout@v5
|
|
with:
|
|
repository: krb5/krb5
|
|
ref: krb5-${{ matrix.ref }}-final
|
|
path: krb5
|
|
fetch-depth: 1
|
|
|
|
- name: Apply patch
|
|
working-directory: ./krb5
|
|
run: |
|
|
patch -p1 < $GITHUB_WORKSPACE/osp/krb5/Patch-for-Kerberos-5-${{ matrix.ref }}.patch
|
|
|
|
- name: workaround high-entropy ASLR
|
|
# not needed after either an update to llvm or runner is done
|
|
run: sudo sysctl vm.mmap_rnd_bits=28
|
|
|
|
- name: Build krb5
|
|
working-directory: ./krb5/src
|
|
run: |
|
|
autoreconf -ivf
|
|
# Using rpath because LD_LIBRARY_PATH is overwritten during testing
|
|
export WOLFSSL_CFLAGS="-I$GITHUB_WORKSPACE/build-dir/include -I$GITHUB_WORKSPACE/build-dir/include/wolfssl -Wl,-rpath=$GITHUB_WORKSPACE/build-dir/lib"
|
|
export WOLFSSL_LIBS="-lwolfssl -L$GITHUB_WORKSPACE/build-dir/lib -Wl,-rpath=$GITHUB_WORKSPACE/build-dir/lib"
|
|
./configure --with-crypto-impl=wolfssl --with-tls-impl=wolfssl --disable-pkinit --with-spake-openssl \
|
|
CFLAGS='-fsanitize=address' LDFLAGS='-fsanitize=address'
|
|
CFLAGS='-fsanitize=address' LDFLAGS='-fsanitize=address' make -j
|
|
|
|
- name: Run tests
|
|
working-directory: ./krb5/src
|
|
run: |
|
|
CFLAGS='-fsanitize=address' LDFLAGS='-fsanitize=address' make -j check
|
|
|