mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-07-06 21:20:51 +02:00
David Garske
7f80896033
- Skip CI for draft PRs and redundant master-push re-runs; membrowse nightly. - Add smoke test (8 configs, CFLAGS=-Werror, post-merge tree, fail-fast on conflicts). - Add wait-for-smoke composite action for downstream CI gating. - Add check-source-text + bash -n + shellcheck workflow (script in make dist). - Cache apt-get update in install-apt-deps composite on cache hit.
109 lines
3.4 KiB
YAML
109 lines
3.4 KiB
YAML
name: mbedtls interop Tests
|
|
|
|
# START OF COMMON SECTION
|
|
on:
|
|
push:
|
|
branches: [ 'release/**' ]
|
|
pull_request:
|
|
types: [opened, synchronize, reopened, ready_for_review]
|
|
branches: [ '*' ]
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
# END OF COMMON SECTION
|
|
|
|
env:
|
|
MBED_REF: v3.6.2
|
|
|
|
jobs:
|
|
build_mbedtls:
|
|
name: Build mbedtls
|
|
if: ${{ (github.repository_owner == 'wolfssl') && (github.event_name != 'pull_request' || github.event.pull_request.draft == false) }}
|
|
runs-on: ubuntu-24.04
|
|
# This should be a safe limit for the tests to run.
|
|
timeout-minutes: 10
|
|
steps:
|
|
- name: Checking if we have mbed in cache
|
|
uses: actions/cache@v4
|
|
id: cache
|
|
with:
|
|
path: mbedtls
|
|
key: mbedtls-${{ env.MBED_REF }}
|
|
lookup-only: true
|
|
|
|
- name: Checkout mbedtls
|
|
if: steps.cache.outputs.cache-hit != 'true'
|
|
uses: actions/checkout@v4
|
|
with:
|
|
repository: Mbed-TLS/mbedtls
|
|
ref: ${{ env.MBED_REF }}
|
|
path: mbedtls
|
|
fetch-depth: 1
|
|
|
|
- name: Compile mbedtls
|
|
if: steps.cache.outputs.cache-hit != 'true'
|
|
working-directory: mbedtls
|
|
run: |
|
|
git submodule update --init
|
|
mkdir build
|
|
cd build
|
|
cmake ..
|
|
make -j$(nproc)
|
|
# convert key to pem format
|
|
openssl pkey -in framework/data_files/cli-rsa-sha256.key.der -text > framework/data_files/cli-rsa-sha256.key.pem
|
|
openssl pkey -in framework/data_files/server2.key.der -text > framework/data_files/server2.key.pem
|
|
|
|
mbedtls_test:
|
|
name: Test interop with mbedtls
|
|
if: ${{ (github.repository_owner == 'wolfssl') && (github.event_name != 'pull_request' || github.event.pull_request.draft == false) }}
|
|
runs-on: ubuntu-24.04
|
|
needs: build_mbedtls
|
|
timeout-minutes: 15
|
|
steps:
|
|
- name: Disable IPv6 (IMPORTANT, OTHERWISE DTLS MBEDTLS CLIENT WON'T CONNECT)
|
|
run: echo 1 | sudo tee /proc/sys/net/ipv6/conf/lo/disable_ipv6
|
|
|
|
- name: Checking if we have mbed in cache
|
|
uses: actions/cache@v4
|
|
id: cache
|
|
with:
|
|
path: mbedtls
|
|
key: mbedtls-${{ env.MBED_REF }}
|
|
|
|
- name: Checkout mbedtls (fallback on cache miss)
|
|
if: steps.cache.outputs.cache-hit != 'true'
|
|
uses: actions/checkout@v4
|
|
with:
|
|
repository: Mbed-TLS/mbedtls
|
|
ref: ${{ env.MBED_REF }}
|
|
path: mbedtls
|
|
fetch-depth: 1
|
|
|
|
- name: Compile mbedtls (fallback on cache miss)
|
|
if: steps.cache.outputs.cache-hit != 'true'
|
|
working-directory: mbedtls
|
|
run: |
|
|
git submodule update --init
|
|
mkdir build
|
|
cd build
|
|
cmake ..
|
|
make -j$(nproc)
|
|
openssl pkey -in framework/data_files/cli-rsa-sha256.key.der -text > framework/data_files/cli-rsa-sha256.key.pem
|
|
openssl pkey -in framework/data_files/server2.key.der -text > framework/data_files/server2.key.pem
|
|
|
|
- name: Build wolfSSL
|
|
uses: wolfSSL/actions-build-autotools-project@v1
|
|
with:
|
|
path: wolfssl
|
|
configure: --enable-dtls --enable-dtlscid
|
|
install: false
|
|
check: false
|
|
|
|
- name: Test interop
|
|
run: bash wolfssl/.github/workflows/mbedtls.sh
|
|
|
|
- name: print server logs
|
|
if: ${{ failure() }}
|
|
run: cat /tmp/server.log
|