Use separate OpenSSL sources for fips and static

Modify the GitHub Actions build workflow to check out different OpenSSL
sources depending on the linking type.

FIPS builds now use a specific fork and branch
(`simo5/openssl@kryoptic_ossl35`) required for the FIPS provider. Static
builds are updated to use the official OpenSSL repository's master branch.
Previously, both build types used the same FIPS-specific branch.

Signed-off-by: Simo Sorce <simo@redhat.com>

Author: simo5

.github/workflows/build.yml

@@ -8,7 +8,8 @@ on:
     branches: ["main"]
 
 env:
-  OPENSSL_BRANCH: kryoptic_ossl35
+  OPENSSL_FIPS_BRANCH: kryoptic_ossl35
+  OPENSSL_STATIC_BRANCH: master
 
 jobs:
   build:
@@ -69,14 +70,30 @@ jobs:
       - name: Checkout Repository
         uses: actions/checkout@v4
 
-      - name: Setup OpenSSL
-        if: ${{ matrix.linking == 'fips' || matrix.linking == 'static' }}
+      - name: Setup OpenSSL (fips)
+        if: ${{ matrix.linking == 'fips' }}
         id: ossl-setup
         run: |
           git config --global --add safe.directory /__w/kryoptic
           cd ..
           git clone https://github.com/simo5/openssl.git \
-                    --single-branch --branch $OPENSSL_BRANCH openssl
+                    --single-branch --branch $OPENSSL_FIPS_BRANCH openssl
+          cd openssl
+          echo "KRYOPTIC_OPENSSL_SOURCES=$PWD" >> "$GITHUB_ENV"
+          OS=${{ runner.os }}
+          if [ "${{ matrix.name }}" = "i686" ]; then
+              OS="${OS}-i686"
+          fi
+          echo "cacheid=${OS}-ossl-$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
+
+      - name: Setup OpenSSL (static)
+        if: ${{ matrix.linking == 'static' }}
+        id: ossl-setup
+        run: |
+          git config --global --add safe.directory /__w/kryoptic
+          cd ..
+          git clone https://github.com/openssl/openssl.git \
+                    --single-branch --branch $OPENSSL_STATIC_BRANCH openssl
           cd openssl
           echo "KRYOPTIC_OPENSSL_SOURCES=$PWD" >> "$GITHUB_ENV"
           OS=${{ runner.os }}