Merge pull request #157 from Frauschi/pkcs11_pqc_prep

PQC Support preparation

Author: dgarske

.github/workflows/alpine-architecture-tests.yml

@@ -7,7 +7,7 @@ on:
     branches: [ '*' ]
 
 env:
-  WOLFSSL_VERSION: v5.8.0-stable
+  WOLFSSL_VERSION: v5.8.4-stable
 
 jobs:
   alpine-architecture-tests:

.github/workflows/nss-cmsutil-test.yml

@@ -10,7 +10,7 @@ on:
 env:
   NSPR_VERSION: NSPR_4_36_BRANCH
   NSS_VERSION: NSS_3_112_RTM
-  WOLFSSL_VERSION: v5.8.0-stable
+  WOLFSSL_VERSION: v5.8.4-stable
   NSS_DEBUG_PKCS11_MODULE: wolfPKCS11
   NSPR_LOG_MODULES: all:5
   NSPR_LOG_FILE: /logs/nss.log
@@ -238,10 +238,10 @@ jobs:
 
         # Step 2: Generate user certificate and key pair directly in NSS
         echo "   Generating user certificate and key pair in NSS database..."
-        
+
         # Create random seed for key generation
         dd if=/dev/urandom of=noise.bin bs=20 count=1 2>/dev/null
-        
+
         # Generate certificate request with key pair (creates DER format)
         printf '\n\n' | certutil -R -s "CN=Test User,O=NSS Test,C=US" \
         -o user-req.der -d /nss-test/nssdb -z noise.bin

.github/workflows/nss-curl-test.yml

@@ -9,7 +9,7 @@ on:
 env:
   NSPR_VERSION: NSPR_4_36_BRANCH
   NSS_VERSION: NSS_3_112_RTM
-  WOLFSSL_VERSION: v5.8.0-stable
+  WOLFSSL_VERSION: v5.8.4-stable
   CURL_VERSION: 8.0.0
   NSS_DEBUG_PKCS11_MODULE: "wolfPKCS11"
   NSPR_LOG_MODULES: all:5
@@ -51,7 +51,7 @@ jobs:
             ca-certificates \
             libnss3-tools
           sudo rm -rf /var/lib/apt/lists/*
-      
+
       - name: Cache NSPR
         id: cache-nspr
         uses: actions/cache@v4
@@ -87,7 +87,7 @@ jobs:
         run: |
           mkdir -p /tmp/src
           cd /tmp/src
-          
+
           # Clone official Mozilla NSS with specific tag
           hg clone https://hg.mozilla.org/projects/nss -r ${{ env.NSS_VERSION }}
 
@@ -211,7 +211,7 @@ jobs:
         run: |
           sudo mkdir -p /etc/pki/nssdb
           cd /etc/pki
-          
+
           # Initialize NSS database
           sudo certutil -N -d sql:/etc/pki/nssdb --empty-password
 

.github/workflows/nss-pdfsig-test.yml

@@ -9,7 +9,7 @@ on:
 env:
   NSPR_VERSION: NSPR_4_36_BRANCH
   NSS_VERSION: NSS_3_112_RTM
-  WOLFSSL_VERSION: v5.8.0-stable
+  WOLFSSL_VERSION: v5.8.4-stable
 
 jobs:
   test-nss-pdf-signing:

.github/workflows/nss-pk12util-debian-test.yml

@@ -8,7 +8,7 @@ on:
   workflow_dispatch:
 
 env:
-  WOLFSSL_VERSION: v5.8.0-stable
+  WOLFSSL_VERSION: v5.8.2-stable # make deb seems to be broken with v5.8.4-stable
   NSS_DEBUG_PKCS11_MODULE: wolfPKCS11
   NSPR_LOG_MODULES: all:5
   NSPR_LOG_FILE: /logs/nss.log

.github/workflows/nss-pk12util-test.yml

@@ -10,7 +10,7 @@ on:
 env:
   NSPR_VERSION: NSPR_4_36_BRANCH
   NSS_VERSION: NSS_3_112_RTM
-  WOLFSSL_VERSION: v5.8.0-stable
+  WOLFSSL_VERSION: v5.8.4-stable
   NSS_DEBUG_PKCS11_MODULE: wolfPKCS11
   NSPR_LOG_MODULES: all:5
   NSPR_LOG_FILE: /logs/nss.log

.github/workflows/nss-ssltap-test.yml

@@ -10,7 +10,7 @@ on:
 env:
   NSPR_VERSION: NSPR_4_36_BRANCH
   NSS_VERSION: NSS_3_112_RTM
-  WOLFSSL_VERSION: v5.8.0-stable
+  WOLFSSL_VERSION: v5.8.4-stable
   NSS_DEBUG_PKCS11_MODULE: wolfPKCS11
   NSPR_LOG_MODULES: all:5
   NSPR_LOG_FILE: /logs/nss.log

.github/workflows/nss.yml

@@ -10,7 +10,7 @@ on:
 env:
   NSPR_VERSION: NSPR_4_36_BRANCH
   NSS_VERSION: NSS_3_112_RTM
-  WOLFSSL_VERSION: v5.8.0-stable
+  WOLFSSL_VERSION: v5.8.4-stable
   #NSS_DEBUG_PKCS11_MODULE: wolfPKCS11
   #NSPR_LOG_MODULES: all:5
   #NSPR_LOG_FILE: /logs/nss.log

.github/workflows/storage-upgrade-test-tpm.yml

@@ -5,7 +5,7 @@ on:
     branches: [ '*' ]
 
 env:
-  WOLFSSL_VERSION: v5.8.0-stable
+  WOLFSSL_VERSION: v5.8.4-stable
 
 jobs:
   storage-upgrade-test-tpm:

.github/workflows/storage-upgrade-test.yml

@@ -5,7 +5,7 @@ on:
     branches: [ '*' ]
 
 env:
-  WOLFSSL_VERSION: v5.8.0-stable
+  WOLFSSL_VERSION: v5.8.4-stable
 
 jobs:
   storage-upgrade-test:
@@ -20,7 +20,7 @@ jobs:
           # - name: v1.3.0
           #   ref: v1.3.0-stable
           #   branch-dir: v1.3.0-stable-branch
-    
+
     steps:
     # Checkout the PR branch
     - name: Checkout PR branch
@@ -52,7 +52,7 @@ jobs:
         repository: wolfssl/wolfssl
         path: wolfssl
         ref: ${{ env.WOLFSSL_VERSION }}
-    
+
     - name: Build wolfssl
       if: steps.cache-wolfssl.outputs.cache-hit != 'true'
       working-directory: ./wolfssl
@@ -109,30 +109,30 @@ jobs:
     - name: Copy storage files from ${{ matrix.base-ref.name }} to PR
       run: |
         echo "=== Copying storage files from ${{ matrix.base-ref.name }} to PR branch ==="
-        
+
         # Create directories if they don't exist
         mkdir -p pr-branch/store
-        
+
         # Copy store files
         if [ -d "${{ matrix.base-ref.branch-dir }}/store" ]; then
           cp -rv ${{ matrix.base-ref.branch-dir }}/store/* pr-branch/store/ 2>/dev/null || echo "No files in ${{ matrix.base-ref.branch-dir }}/store/"
         fi
-        
+
         echo "=== Storage file copy completed ==="
 
     - name: Test storage format compatibility (${{ matrix.base-ref.name }} → PR)
       working-directory: ./pr-branch
       run: |
         echo "=== Testing storage format compatibility with PR branch ==="
         echo "This tests that the PR can read storage files created by ${{ matrix.base-ref.name }} branch"
-        
+
         # List the copied files for verification
         echo "Files in store directory:"
         ls -la store/* 2>/dev/null || echo "No wp* files in store/"
-        
+
         # Run the tests with the copied storage files
         ./tests/pkcs11test
-        
+
         echo "=== Storage format upgrade test (${{ matrix.base-ref.name }} → PR) completed successfully ==="
 
     # Upload artifacts for debugging if needed