ci: add more awslc-fips-2022 testing #5049
Draft
+29
−0
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Release Summary:
Description of changes:
I noticed while messing with the fips logic for the openssl-3-fips work that we're missing some awslc-fips testing:
awslc is an important libcrypto and fips is a common use case, so we need to make sure we thoroughly test the latest fips version of awslc. Wherever we test with different libcryptos, we should be testing with awslc-fips-2022.
I searched our buildspecs for "S2N_LIBCRYPTO:" to get an idea of which specs used which libcryptos. I added awslc-fips-2022 anywhere it was missing.
Testing:
This adds more testing, which should pass in the CI.
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.