Skip to content

Add .deb support for Github Workflows #868

Add .deb support for Github Workflows

Add .deb support for Github Workflows #868

Workflow file for this run

name: cjose Tests
# START OF COMMON SECTION
on:
push:
branches: [ 'master', 'main', 'release/**' ]
pull_request:
branches: [ '*' ]
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
# END OF COMMON SECTION
jobs:
build_wolfprovider:
uses: ./.github/workflows/build-wolfprovider.yml
with:
wolfssl_ref: ${{ matrix.wolfssl_ref }}
openssl_ref: ${{ matrix.openssl_ref }}
strategy:
matrix:
# Test 5.8.2 since our .deb is based on that version
wolfssl_ref: [ 'v5.8.2-stable' ]
openssl_ref: [ 'openssl-3.5.0' ]
test_cjose:
runs-on: ubuntu-22.04
needs: build_wolfprovider
# This should be a safe limit for the tests to run.
timeout-minutes: 20
container:
image: debian:bookworm
env:
DEBIAN_FRONTEND: noninteractive
strategy:
matrix:
# Dont test osp master since it might be unstable
cjose_ref: [ 'v0.6.2.1' ]
wolfssl_ref: [ 'v5.8.2-stable' ]
openssl_ref: [ 'openssl-3.5.0' ]
force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ]
steps:
- name: Set up environment
run: |
apt-get update
apt-get install -y git sudo build-essential autoconf automake \
libtool pkg-config libjansson-dev check ca-certificates dpkg-dev
- name: Checkout wolfProvider
uses: actions/checkout@v4
with:
fetch-depth: 1
- name: Download wolfSSL packages
uses: actions/download-artifact@v4
with:
name: wolfssl-debian-packages-${{ github.sha }}
path: /tmp/wolfssl-artifacts
- name: Download OpenSSL/wolfProvider packages
uses: actions/download-artifact@v4
with:
name: openssl-wolfprov-debian-packages-${{ github.sha }}
path: /tmp/openssl-wolfprov-artifacts
- name: Install wolfSSL/OpenSSL/wolfprov packages
run: |
set -e
echo "WolfSSL artifacts:"
ls -la /tmp/wolfssl-artifacts || true
echo "OpenSSL/wolfProvider artifacts:"
ls -la /tmp/openssl-wolfprov-artifacts || true
# Install wolfSSL first
wolfssl_debs=$(ls -1 /tmp/wolfssl-artifacts/*.deb 2>/dev/null || true)
if [ -n "$wolfssl_debs" ]; then
echo "Installing wolfSSL packages: $wolfssl_debs"
apt install -y $wolfssl_debs
fi
# Install OpenSSL packages (runtime + development headers)
openssl_debs=$(ls -1 /tmp/openssl-wolfprov-artifacts/openssl_[0-9]*.deb 2>/dev/null || true)
libssl3_debs=$(ls -1 /tmp/openssl-wolfprov-artifacts/libssl3_[0-9]*.deb 2>/dev/null || true)
libssl_dev_debs=$(ls -1 /tmp/openssl-wolfprov-artifacts/libssl-dev_[0-9]*.deb 2>/dev/null || true)
# Install in dependency order: libssl3 first, then openssl, then dev headers
if [ -n "$libssl3_debs" ]; then
echo "Installing libssl3: $libssl3_debs"
apt install -y $libssl3_debs
fi
if [ -n "$openssl_debs" ]; then
echo "Installing openssl: $openssl_debs"
apt install -y $openssl_debs
fi
if [ -n "$libssl_dev_debs" ]; then
echo "Installing libssl-dev: $libssl_dev_debs"
apt install -y $libssl_dev_debs
fi
# Install wolfProvider main package only (no dev/debug needed for testing)
wolfprov_main=$(ls -1 /tmp/openssl-wolfprov-artifacts/libwolfprov_[0-9]*.deb 2>/dev/null | head -n1 || true)
if [ -z "$wolfprov_main" ]; then
echo "ERROR: libwolfprov main package not found in artifacts"
ls -la /tmp/openssl-wolfprov-artifacts
exit 1
fi
echo "Installing wolfProvider main package: $wolfprov_main"
apt install -y "$wolfprov_main"
- name: Download cjose
uses: actions/checkout@v4
with:
repository: OpenIDC/cjose
ref: ${{ matrix.cjose_ref }}
path: cjose
fetch-depth: 1
- name: Build cjose
working-directory: cjose
run: |
./configure CFLAGS="-Wno-error=deprecated-declarations"
# Build cjose
make
- name: Run cjose tests
working-directory: cjose
run: |
# wolfProvider is already loaded as the default provider
echo "Current OpenSSL providers:"
openssl list -providers | grep -q wolfSSL Provider || (echo "ERROR: libwolfprov not found in OpenSSL providers" && exit 1)
export ${{ matrix.force_fail }}
make test || true
TEST_RESULT=$(tail -1 ./test/check_cjose.log | grep PASS; echo $?)
$GITHUB_WORKSPACE/.github/scripts/check-workflow-result.sh $TEST_RESULT ${{ matrix.force_fail }} cjose