wolfPKCS11/.github/workflows/unit-test.yml at master · wolfSSL/wolfPKCS11 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
name: wolfPKCS11 Build Tests

on:
  push:
    branches: [ 'master', 'main', 'release/**' ]
  pull_request:
    branches: [ '*' ]

jobs:

  defaults_all:
    uses: ./.github/workflows/build-workflow.yml

  single_theaded:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-singlethreaded

  aesecb:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-aesecb

  tpm:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-singlethreaded --enable-wolftpm --disable-dh C_EXTRA_FLAGS="-DWOLFPKCS11_TPM_STORE"
      check: ./tests/pkcs11str && ./tests/pkcs11test && ./tests/rsa_session_persistence_test
  tpm_debug:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-singlethreaded --enable-wolftpm --disable-dh --enable-debug C_EXTRA_FLAGS="-DWOLFPKCS11_TPM_STORE"
      check: ./tests/token_store_test

  tpm_no_store:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-singlethreaded --enable-wolftpm --disable-dh CFLAGS="-DWOLFPKCS11_NO_STORE"
      check: ./tests/pkcs11str && ./tests/pkcs11test

  no_rsa:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-rsa
  no_rsaoaep:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-rsaoaep
  no_rsapss:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-rsapss
  no_ecc:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-ecc
  no_dh:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-dh
  no_keygen:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-keygen
  no_keystore:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: CFLAGS="-DWOLFPKCS11_NO_STORE"
  no_env:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: C_EXTRA_FLAGS="-DWOLFPKCS11_NO_ENV" --with-default-token-path=./store/default
      check: mkdir -p store && ./tests/pkcs11test
  no_aesgcm:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-aesgcm
  no_sha512:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-sha512
  no_sha384:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-sha384
  no_sha224:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-sha224
  no_sha3:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-sha3
  no_sha1:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-sha1
  no_md5:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-md5
  no_hmac:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --disable-hmac --disable-hkdf
  with_nss:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-nss
  pbkdf2:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-pbkdf2 --with-pbkdf2-iterations=1000
  pkcs11v3only:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-pkcs11v30 --disable-pkcs11v32
  pkcs11v32:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-pkcs11v32
  pkcs11v32-static:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-pkcs11v32 --disable-shared
  mldsa:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-mldsa
  mlkem:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-mlkem
  lms:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-lms
  xmss:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-xmss
  lms_xmss:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-lms --enable-xmss
  lms_xmss_static:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-lms --enable-xmss --disable-shared
  debug:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --enable-debug
  default_token_path:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: --with-default-token-path=./store/default_token_path

  # Build the library, examples and tests as C++ to catch regressions in
  # C++ compatibility (e.g. missing void* casts, enum-from-int conversions,
  # use of the "template" keyword, C99 compound literals). -Werror=narrowing
  # promotes the int->CK_ULONG narrowing warning to an error so it is caught
  # under GCC as well (clang already treats it as an error).
  cpp_build:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: CC=g++ C_EXTRA_FLAGS="-Werror=narrowing"

  # The same C++ build with --enable-debug, which adds the debug-only test
  # hooks and the tests that declare them. Those declarations need
  # extern "C" to match the library's C linkage, or the tests fail to link.
  cpp_debug_build:
    uses: ./.github/workflows/build-workflow.yml
    with:
      config: CC=g++ C_EXTRA_FLAGS="-Werror=narrowing" --enable-debug

  wolfssl_v5_6_6:
    uses: ./.github/workflows/wolfssl-v5.6.6-build-workflow.yml

  #TODO: --disable-aes            Enable AES (default: enabled)
  #TODO: --disable-aescbc         Enable AES-CBC (default: enabled)
  #TODO: --disable-sha256         Enable SHA-256 (default: enabled)