428 Commits

Author	SHA1	Message	Date
openssl-machine	e66332418f	Copyright year updates ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Release: yes	2025-09-02 13:05:45 +00:00
Tatsuki Ito	141ad51b46	Remove unnecessary fetch-depth in GitHub Actions workflow ... Fixes #28107 The build_quic_interop_container.yml workflow does not need the full git history. Removing fetch-depth: 0 reduces unnecessary checkout. CLA: trivial Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28299)	2025-08-20 08:23:14 -04:00
Hongren Zheng	ff9d70b9ee	CI: cross-compile: riscv: enable more tests on extensions ... [riscv ci] Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/24403)	2025-08-18 08:56:54 +10:00
Alexandr Nedvedicky	001ce7c281	- veirfy downloaded package ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28136)	2025-08-09 09:38:39 -04:00
Alexandr Nedvedicky	b5157f29a9	the rpki-client external test should use relase version not a master branch on github ... @botovq asked me not to use master branch of rpki-client. This will keep CI-run green regardless of what happens in rpki-client active development branch. Once new version of rpki-client will be released we will just update the test here to fetch new msater version. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28136)	2025-08-09 09:38:39 -04:00
Andrew Dinh	4a518cebff	Fix msquic-openssl workflow to build container correctly ... - Fix inline file replacement on qns.Dockerfile - Add check to ensure patch ran successfully Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28140)	2025-08-08 18:20:07 +02:00
Nikolas Gauder	1bbb0d7b53	.github/workflows/run_quic_interop.yml: remove superfluous docker-compose.yml patching ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28179)	2025-08-07 08:05:56 -04:00
Neil Horman	22d7d1d7d0	Add mdebug config for coveralls on master branch ... enable mdebug on coveralls for the master branch so that, when testing we run our memory failure tests and pick up the extra test coverage Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28078)	2025-08-06 09:07:40 -04:00
Neil Horman	3c3f0da9bd	Add a daily memory allocation failure test ... nightly, run the memory allocation failure test. We build with asan enabled to log memory leaks and other issues Note the test is designed to pass even if the test fails, as currently (perhaps not suprisingly), several error paths result in asan errors. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28078)	2025-08-06 09:07:40 -04:00
Tomas Mraz	1a1c10f5d7	Exchange no-sm2 and no-ssl-trace between on PR and daily jobs ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28106)	2025-07-28 11:15:52 +02:00
Andrew Dinh	9665baf0f9	Update workflows to test msquic with OpenSSL ... Update GitHub Workflows to build msquic with OpenSSL with TLS backend, push to Quay.io, and test with current QUIC interop workflow Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28045)	2025-07-25 12:43:59 -04:00
Dmitry Misharov	d217b49994	--amend ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27467)	2025-07-23 11:22:38 -04:00
Dmitry Misharov	d9044daf1e	replace GitHub Actions in Windows jobs ... Most of the GitHub Actions can be replaced with a couple of commands. This will reduce dependencies bloating and some attacks surface. This commit replaces all GitHub Actions which are not from GitHub and Cygwin for Windows jobs with plain commands. Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27467)	2025-07-23 11:22:38 -04:00
Dmitry Misharov	b3187ab5a7	Add CODEOWNERS file ... quarckster is the owner of the /.github/workflows/ directory. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28060)	2025-07-21 20:30:51 +02:00
Dmitry Misharov	9ee9a519be	pin GitHub Actions revisions from untrusted vendors ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27181)	2025-07-21 09:56:23 -04:00
Dmitry Misharov	a9a7e017b8	Update container images in OS Zoo CI workflow ... Replace outdated and unsupported distro versions with up-to-date ones. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28049)	2025-07-21 15:23:16 +02:00
Norbert Pocs	b89ab15f13	Add workflow to check perl core modules for 5.10.1 ... The motivation is to notice if we would add a module which is not a core module in the minimal supported perl version. This does not fail on other errors or warnings by perl, but we should clear out those also. Resolves: https://github.com/openssl/project/issues/1269 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28024)	2025-07-17 11:59:19 -04:00
Nikola Pajkovsky	4337989667	ci: enable lms only on master ... a new config option cannot be enabled globally because the option was not backported to the older versions. Signed-off-by: Nikola Pajkovsky <nikolap@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28019)	2025-07-14 07:20:23 -04:00
Pauli	2bcfff8509	ci: enable LMS in a number of different builds ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
Tomas Mraz	2b56a00eb9	Add CI for backports to be run when respective branch label is set ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27947)	2025-07-07 15:32:36 +02:00
Tomas Mraz	9f08f30f1d	CI: Enable strict warnings on all Windows CI builds ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27806)	2025-07-02 17:26:26 +02:00
Vladimír Chlup	a9cb68ee8f	Skip CI jobs for custom runners in forks ... These usualy timeout in 24 hours because custom runners are not available Fixes: #27818 CLA: trivial Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27819)	2025-06-20 16:00:56 +01:00
Neil Horman	1187df5328	Add branch coverage to our coveralls run ... Coveralls is capable of reporting not only covered lines in a build, but also the number of times a given branch was taken vs. not taken. This will help us identify locations where we might make better use of the openssl_likely and openssl_unlikely macros to optimize branch prediction when building openssl Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27839)	2025-06-20 06:40:14 -04:00
Ingo Franzki	d56e2450c1	CI: Remove -Wno-stringop-overflow for s390x builds ... Since 9a788281d9 it should now build warning-free on s390x, so remove the '-Wno-stringop-overflow' build option for s390x builds. If newly added code causes -Wstringop-overflow warnings again, it should be noted in the CI runs and the newly added code should be fixed accordingly. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27803)	2025-06-18 19:00:47 +02:00
Dmitry Misharov	19dfc4672a	ci: remove windows-2019 runner images ... According to https://github.com/actions/runner-images/issues/12045 The Windows 2019 Actions runner image will begin deprecation on 2025-06-01 and will be fully unsupported by 2025-06-30. Jobs using the windows-2019 YAML workflow label should be updated to windows-2022, windows-2025 or windows-latest. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27749)	2025-06-04 16:40:45 +02:00
sashan	857156910d	- drop s/-ansi/-std=c99 ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27659)	2025-06-03 09:02:21 -04:00
sashan	eee2d0610b	- install libtls-dev ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
sashan	f92157d340	- s/libtls/libretls ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
sashan	fa43c8c059	- install libtls ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
sashan	abe1014d0d	- fix typo in github action ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
sashan	f50e069424	- adding rpki test to ci workflow ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
Norbert Pocs	a0d1af6574	quic-interop-ci: Fix docker install ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27687)	2025-05-23 15:02:47 -04:00
Norbert Pocs	d7be888244	quic-interop-ci: Fix failing CI ... The issue was a flaky "impossible to reach server" in the CI. The issue was caused by introduction of indeterminism to docker networking (docker engine v28.0) and docker compose is affected by that since v2.33.1. Using constant network interface names solves the issue. The "interface_name" was introduced in docker compose v2.36.0. Resolves: https://github.com/openssl/project/issues/1182 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27682)	2025-05-22 11:09:54 +02:00
Ondrej Moris	402380d3e1	ci: run all non-external tests on fedora:latest ... Before pkcs11-provider external test runs, we run all non-external tests since we want to make sure they work fine on fedora:latest container. Signed-off-by: Ondrej Moris <omoris@redhat.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27602)	2025-05-20 21:29:14 +02:00
Ondrej Moris	29e7e1dcb6	ci: run pkcs11-provider external test on Fedora ... We want to be able to run pkcs11-provider external test with kryoptic token that is currently only available on Fedora. Therefore we have to separate the test from the external test for oqs provider. Signed-off-by: Ondrej Moris <omoris@redhat.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27602)	2025-05-20 21:29:14 +02:00
Ondrej Moris	016d6deb85	ci: re-enable pkcs11-provider external test ... Signed-off-by: Ondrej Moris <omoris@redhat.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27602)	2025-05-20 21:29:14 +02:00
Neil Horman	5810149e65	Add retry capability to apt commands in quic interop ... We're getting more frequent overnight failures in quic interop due to failing updates that appear transient when conducting apt installs Add the capability to do retry commands here Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27489)	2025-05-09 07:44:31 -04:00
Dmitry Misharov	3513a830cc	Run tests nightly on riscv64 runner ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27240)	2025-05-02 13:45:06 +02:00
Dmitry Misharov	1ad186986c	Replace ilammy/setup-nasm with nasm install from choco ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27462)	2025-04-22 14:55:27 +02:00
Vladimír Chlup	ee52d7d327	Prevent CI jobs with secrets from running in forks ... These Github actions will run only in the upstream repository CLA: trivial Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27275)	2025-04-15 15:20:01 +01:00
Neil Horman	172076029c	Revert "Temporarily disable gost-engine tests in ci" ... This reverts commit db9771b5a0. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27259)	2025-04-09 14:04:09 -04:00
Neil Horman	69acfa358f	Disable stringop-overflow warnings on s390 ... Recently ci on master has been failing: https://github.com/openssl/openssl/actions/runs/14234051502/job/39919663876 Its occuring because the s390 gcc compiler is complaining about various functions attempting to write past the end of an array. However, I can find no case in which we actually do so in this case. The problem resolves when we either: 1) Disable the stringop-overflow warning or 2) disable all loop unrolling optimizations with fno-loop-nest-optimize Given that asan doesn't report any out of bounds errors on s390 when built with case (1), and case (2) can be a significant performance hit, coupled with the fact that gcc on any other platform avoids the same issue (s390 is stuck on gcc 12, instead of gcc 16 where the other platforms are), I think the right thing to do is just disable the warning here Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27253)	2025-04-03 10:54:31 -04:00
Neil Horman	db9771b5a0	Temporarily disable gost-engine tests in ci ... We need to temporarily disable this as we have a build break in CI: https://github.com/openssl/openssl/actions/runs/14192630435 Its occuring because gost-engine depends on libprov, which requires a minimum version cmake-3.0. The update of github runners to cmake-4.0 causes a bail out as cmake 4.0 no longers supports cmake 3.0 syntax. Libprov is fixed now, but gost-engine needs to update its libprov submodule, and then we need to update the gost-engine submodule. Until thats done (which may take days), we should disable the gost-engine external tests Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27234)	2025-04-02 17:25:12 +02:00
Neil Horman	94b34ee67a	update rust toolchain ... Needs update to build new rust crate for pyca-cryptography Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27192)	2025-04-01 09:23:30 -04:00
Pauli	dad4704a5d	ci: strict warnings the default ... Make building with --strict-warnings the default for most builds. Move this option to immediately after the ./config command so its presence is clearer. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27204)	2025-04-01 15:09:30 +02:00
Pauli	d04ea9af79	ci: remove unnecessary -Wall and -Werror options ... The oprion --strict-warnings automatically turns on -Wall and -Werror so there is no requirement to specify the latter two separately. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27204)	2025-04-01 15:09:30 +02:00
Vavroch	b3955eaa26	Added 3.5 to coveralls.yml ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Dmitry Misharov <dmitry@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27202)	2025-03-31 11:17:34 -04:00
Tomas Mraz	bf4c9b7b66	provider-compatibility.yml: Update the branches ... Fixes regression from 725f55e23 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27177)	2025-03-27 12:18:10 +01:00
Tomas Mraz	725f55e235	Update provider compatibility CI to run on 3.5 branch ... Also drop 3.1 development branch as it is out of public support now. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27149)	2025-03-26 15:02:52 +01:00
Bernd Edlinger	289dcbe008	Upload artifacts despite possible test failures ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27089)	2025-03-24 20:20:14 +01:00