Remove limit on MAC protected headers; MAC code size smaller #1190
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: CI | |
on: [push, pull_request] | |
jobs: | |
main: | |
strategy: | |
fail-fast: false | |
matrix: | |
c-compiler: [gcc, clang] | |
config: | |
# OpenSSL 1.1.1 (Ubuntu 20.04) | |
- os-image: ubuntu-latest | |
container: ubuntu:20.04 | |
crypto-provider: OpenSSL | |
# OpenSSL 3.0 (Ubuntu 22.04) | |
- os-image: ubuntu-latest | |
container: ubuntu:22.04 | |
crypto-provider: OpenSSL | |
- os-image: ubuntu-latest | |
container: ubuntu:20.04 | |
crypto-provider: MbedTLS | |
crypto-provider-version: 'v2.28.0' | |
crypto-provider-extra: '' | |
crypto-provider-build-extra: '' | |
- os-image: ubuntu-latest | |
container: ubuntu:20.04 | |
crypto-provider: MbedTLS | |
crypto-provider-version: 'v3.1.0' | |
crypto-provider-extra: '' | |
crypto-provider-build-extra: '' | |
- os-image: ubuntu-latest | |
container: ubuntu:20.04 | |
crypto-provider: MbedTLS | |
crypto-provider-version: 'v3.4.0' | |
crypto-provider-extra: '' | |
crypto-provider-build-extra: '' | |
- os-image: ubuntu-latest | |
container: ubuntu:20.04 | |
crypto-provider: MbedTLS | |
crypto-provider-version: 'v3.4.0' | |
crypto-provider-extra: '' | |
crypto-provider-build-extra: 'python3 scripts/config.py set MBEDTLS_ECP_RESTARTABLE' | |
- os-image: ubuntu-latest | |
container: ubuntu:20.04 | |
crypto-provider: Test | |
name: ${{ matrix.config.crypto-provider }} ${{ matrix.config.crypto-provider-version }} • ${{ matrix.c-compiler }} • ${{ matrix.config.container }} | |
runs-on: ${{ matrix.config.os-image }} | |
container: ${{ matrix.config.container }} | |
steps: | |
- uses: actions/checkout@v3 | |
- name: Install build tools | |
run: | | |
set -ex | |
export DEBIAN_FRONTEND=noninteractive | |
apt-get update | |
apt-get install -y build-essential cmake python3 ${{ matrix.c-compiler }} \ | |
python3-jinja2 python3-jsonschema | |
echo "CC=${{ matrix.c-compiler }}" >> $GITHUB_ENV | |
- name: Install OpenSSL | |
if: matrix.config.crypto-provider == 'OpenSSL' | |
run: apt-get install -y libssl-dev | |
- name: Fetch MbedTLS | |
if: matrix.config.crypto-provider == 'MbedTLS' | |
uses: actions/checkout@v3 | |
with: | |
repository: ARMmbed/mbedtls | |
ref: ${{ matrix.config.crypto-provider-version }} | |
path: mbedtls | |
- name: Install MbedTLS | |
if: matrix.config.crypto-provider == 'MbedTLS' | |
run: | | |
cd mbedtls | |
${{ matrix.config.crypto-provider-build-extra }} | |
make -j $(nproc) | |
make install | |
- name: Fetch QCBOR | |
uses: actions/checkout@v3 | |
with: | |
repository: laurencelundblade/QCBOR | |
path: QCBOR | |
- name: Install QCBOR | |
run: | | |
cd QCBOR | |
make -j$(nproc) | |
make install | |
- name: Build t_cose | |
run: | | |
set -ex | |
mkdir build | |
cd build | |
cmake -DCRYPTO_PROVIDER=${{ matrix.config.crypto-provider }} \ | |
${{ matrix.config.crypto-provider-extra }} \ | |
${{ matrix.config.defines }} \ | |
.. | |
make -j $(nproc) | |
- name: Run examples | |
run: build/t_cose_examples | |
- name: Run tests | |
if: matrix.config.crypto-provider == 'MbedTLS' && | |
matrix.config.crypto-provider-version == 'v3.4.0' && | |
matrix.config.crypto-provider-build-extra == '' | |
# This Mbed TLS version has the option of restartable ECP, however it is | |
# not turned on. In this case the restartable testcase should fail. | |
run: build/t_cose_test | grep 'restart_test_2_step FAILED' | |
- name: Run tests | |
if: ${{ ! ( matrix.config.crypto-provider == 'MbedTLS' && | |
matrix.config.crypto-provider-version == 'v3.4.0' && | |
matrix.config.crypto-provider-build-extra == '' ) }} | |
run: build/t_cose_test |