summaryrefslogtreecommitdiff
path: root/.gitlab-ci.yml
Commit message (Collapse)AuthorAgeFilesLines
* .gitlab-ci.yml: temporarily allow failures on Debian.cross.aarch64tmp-nettle-3.6Daiki Ueno2020-11-091-0/+1
| | | | | | | | | | | | | | qemu is currently causing segmentation fault: cipher: aes-128-gcm cipher: aes-192-gcm cipher: aes-256-gcm cipher: chacha20-poly1305 qemu: uncaught target signal 11 (Segmentation fault) - core dumped Segmentation fault (core dumped) default cipher tests failed FAIL test-ciphers-openssl.sh (exit status: 139) Signed-off-by: Daiki Ueno <ueno@gnu.org>
* .gitlab-ci.yml: use nettle git master for FreeBSD.x86_64Daiki Ueno2020-11-091-5/+15
| | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
* .gitlab-ci.yml: use Fedora 33 with LEGACY policy for SSL 3.0 testingDaiki Ueno2020-11-041-1/+2
| | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
* .gitlab-ci.yml: supply -fstack-protector required by latest MinGWDaiki Ueno2020-11-041-1/+19
| | | | | | https://sourceforge.net/p/mingw-w64/bugs/818/ Signed-off-by: Daiki Ueno <ueno@gnu.org>
* .gitlab-ci.yml: avoid using fipshmacDaiki Ueno2020-11-041-1/+4
| | | | | | | The new fipshmac command provided by libkcapi requires NETLINK_CRYPTO, which is not enabled on gitlab CI. Signed-off-by: Daiki Ueno <ueno@gnu.org>
* .gitlab-ci.yml: update build-images for nettle 3.6Daiki Ueno2020-11-041-8/+5
| | | | | | Also remove Debian.cross.mips-linux-gnu, as it is no longer supported. Signed-off-by: Daiki Ueno <ueno@gnu.org>
* bootstrap.conf: exercise more tests from GnulibDaiki Ueno2020-10-271-1/+1
| | | | | | | | | | | | | | | | | | | | This fixes the build failure with -Werror: configure:53786: gcc -o conftest -O0 -Wall -Werror -g3 conftest.c -lev >&5 conftest.c:412: error: "GNULIB_STRERROR" redefined [-Werror] 412 | #define GNULIB_STRERROR 1 | conftest.c:305: note: this is the location of the previous definition 305 | #define GNULIB_STRERROR IN_GNUTLS_GNULIB_TESTS | cc1: all warnings being treated as errors as well as improves code coverage. Suggested by Bruno Haible in: <https://lists.gnu.org/archive/html/bug-gnulib/2020-10/msg00148.html>. Signed-off-by: Daiki Ueno <ueno@gnu.org>
* .gitlab-ci.yml: bump build environment to Fedora 32Daiki Ueno2020-09-181-1/+1
| | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
* .gitlab-ci.yml: bump cache versionDaiki Ueno2020-09-171-1/+1
| | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
* Merge branch 'tmp-nettle-master' into 'master'Dmitry Baryshkov2020-07-041-2/+2
|\ | | | | | | | | .gitlab-ci: disable config.cache for nettle-master builds See merge request gnutls/gnutls!1291
| * .gitlab-ci: disable config.cache for nettle-master buildsDmitry Baryshkov2020-06-141-2/+2
| | | | | | | | | | | | | | | | Disable usage of config.cache for nettle-master builds. Such config.cache files can easily become stale, thus resulting in build failures. Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* | .gitlab-ci.yml: bump configure cache versiontmp-enumDaiki Ueno2020-06-151-1/+1
|/ | | | Signed-off-by: Daiki Ueno <ueno@gnu.org>
* CI: fix typo in the Vista targetSteve Lhomme2020-06-071-2/+45
| | | | | | | This resulted in the MinGW64.Vista+ target doing the same thing as the MinGW64 target. Signed-off-by: Steve Lhomme <robux4@ycbcr.xyz>
* configure.ac: determine if the Vista APIs can be linked staticallySteve Lhomme2020-05-271-0/+36
| | | | | | | | | | | | | If _WIN32_WINNT is higher or equal to 0x0600, Vista API's are allowed during the build. We can assume that the minimum platform the code will run on is Vista [1] In that case there's no need to call API's (ncrypt) dynamically when it can be done statically. [1] https://docs.microsoft.com/en-us/cpp/porting/modifying-winver-and-win32-winnt Signed-off-by: Steve Lhomme <robux4@ycbcr.xyz>
* CI: add nettle-mini-gmp testDmitry Baryshkov2020-04-301-0/+32
| | | | | | | Wget/Wget2 OSS-Fuzz builders use mini-gmp version of nettle. Check that we do not break them occasionally. Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* gitlab CI: when calling cppcheck ignore lib/nettle/ecc rather than ↵Dmitry Baryshkov2020-04-151-2/+2
| | | | | | lib/nettle/curve448 Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* gitlab-ci: add test for usage of nettle/hogweed internal symbolsDmitry Baryshkov2020-04-141-0/+1
| | | | | | Check that GnuTLS does not depend on Nettle/Hogweed internal symbols. Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* Use make with crafted -j for CI builds and testsTim Rühsen2020-01-261-60/+73
| | | | | | | This speeds up the Gitlab CI runners. E.g. measured timings of the Debian.x86_64 runner show ~40% speedup (down from 38 to 23 minutes). Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* .gitlab-ci.yml: remove --disable-gost from nettle-master testDmitry Baryshkov2020-01-241-1/+1
| | | | | | | Remove --disable-gost switch from the test using Nettle's master branch as GnuTLS is now compatible again with nettle/master. Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* .gitlab-ci.yml: force running jobs on linux runnersNikos Mavrogiannopoulos2020-01-241-0/+17
| | | | | | | There are shared windows runners in gitlab, that will fail running our jobs. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: set WINEPATH to allow eccdata run under WineDaiki Ueno2020-01-231-0/+4
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* .gitlab-ci.yml: export LDFLAGS throughout the FreeBSD buildDaiki Ueno2020-01-231-2/+3
| | | | | | Otherwise the build process wouldn't be able to find -lgmp. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* .gitlab-ci.yml: add target to build against nettle masterDaiki Ueno2020-01-231-0/+31
| | | | | | | | This is similar to the build/gnutls target in nettle's own gitlab CI. The only difference is that this will build/test all branches of GnuTLS against the master branch of nettle. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* nettle: vendor in Curve448 and Ed448 implementationDaiki Ueno2020-01-231-1/+1
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* CI: FIPS140-2 run make check without enforcing FIPS modeDmitry Eremin-Solenikov2020-01-101-0/+1
| | | | | | | | Some distributions might enable --enable-fips140-mode, without actually enabling/enforcing FIPS at runtime. Catch issues in such configurations (reported by Daiki Ueno). Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* .gitlab-ci.yml: identify on runtime to db2epub directoryNikos Mavrogiannopoulos2020-01-031-2/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Remove && command concatenation in .gitlab-ci.ymlTim Rühsen2020-01-031-52/+65
| | | | | | | | As it turns out, `set -e` doesn't work if one of the commands fail, maybe except the last command. Seen, tested and reproduced on Fedora28 image. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* .gitlab-ci.yml: merged ASAN and UBSAN runstmp-check-fuzzNikos Mavrogiannopoulos2020-01-031-35/+8
| | | | | | | This in addition to merging the two CI runs, it also attempts to run the fuzz code under SHANI for CI. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* UBSAN: Fail tests if UB detectedTim Rühsen2020-01-031-13/+12
| | | | | | | Suppressions are in devel/ubsan.supp. Suppressions only work on recoverable checks. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* ecore cli: updated and rewritten to use libevNikos Mavrogiannopoulos2020-01-031-1/+1
| | | | | | | | | That removes a lot of code that was not necessary in the gnutls test suite. Resolves: #884 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: use separate images for mingw and fedora buildsNikos Mavrogiannopoulos2020-01-031-5/+6
| | | | | | This should result to faster image loading for CI builds. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* x509: do not tolerate invalid DER timeNikos Mavrogiannopoulos2019-12-261-1/+1
| | | | | | | | | | | This effectively reverts !400 and ensures that we no longer tolerate invalid DER time. This complements the previous commit by Lili Quan and ensures we provide the --disable-strict-der-time backwards compatibility option. Resolves: #207 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* libopts: include new files into disttmp-libopts-fixNikos Mavrogiannopoulos2019-12-021-0/+2
| | | | | | | | | This also includes --enable-local-libopts flag to make dist to catch future regressions. Resolves: #867 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gitlab-ci: enable running make check on minimal buildDmitry Eremin-Solenikov2019-11-221-0/+1
| | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* .gitlab-ci.yml: bump configure cache versiontmp-cfb8-fixesDaiki Ueno2019-11-081-1/+1
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* .gitlab-ci.yml: do not inline strcmp in valgrind buildNikos Mavrogiannopoulos2019-11-011-2/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: removed unnecessary use of --enable-valgrind-testsNikos Mavrogiannopoulos2019-11-011-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: updated CI environment to F31Nikos Mavrogiannopoulos2019-10-301-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: removed coverity build [ci skip]Nikos Mavrogiannopoulos2019-10-101-24/+0
| | | | | | | | | | | | The coverity run is subject to several restrictions by the service, and thus it is not really useful in the main CI runs as it cannot reasonably be run on MRs or master. As such we simplify the main CI file by moving the coverity to the coverage sub-project and running it weekly. The new location is at: https://gitlab.com/gnutls/coverage Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: only run coverity task on 3_6_x tags [ci skip]Nikos Mavrogiannopoulos2019-10-081-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: include an automated coverity build on tagsNikos Mavrogiannopoulos2019-10-071-0/+24
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: run pic-check on i686-linux-gnu to catch wrong assemblyNikos Mavrogiannopoulos2019-09-281-0/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Merge branch 'wip-guile-include-m4-macros' into 'master'Daiki Ueno2019-09-161-1/+10
|\ | | | | | | | | maint: Include Guile's M4 macros. See merge request gnutls/gnutls!1061
| * .gitlab-ci.yml: bump configure cache versiontmp-guile-include-m4-macrosDaiki Ueno2019-09-111-1/+1
| | | | | | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * .gitlab-ci.yml: export guile related envvars for doc-dist.FedoraDaiki Ueno2019-09-111-1/+9
| | | | | | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * .gitlab-ci.yml: minimal.Fedora.x86_64: Pass '--disable-guile' the 2nd time ↵Ludovic Courtès2019-09-051-0/+1
| | | | | | | | | | | | as well. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
| * .gitlab-ci.yml: doc-dist.Fedora: Pass "GUILE", "GUILD", and "guile_snarf" to ↵Ludovic Courtès2019-09-051-1/+1
| | | | | | | | | | | | 'configure'. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* | tests: added interoperability test with gnutls 2.12.xNikos Mavrogiannopoulos2019-09-011-1/+2
|/ | | | | | This enables this test in debian build. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* config: added ability to override and mark algorithms as disabledNikos Mavrogiannopoulos2019-06-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | This allows the system administrator or the distributor to use the gnutls configuration file to mark hashes, signature algorithms, TLS versions, curves, groups, ciphers KX, and MAC algorithms as insecure (the last four only in the context of a TLS session). It also allows to set a minimum profile which the applications cannot fall below. The options intentionally do not allow marking algorithms as secure so that the configuration file cannot be used as an attack vector. This change also makes sure that unsupported and disabled protocols during compile time (e.g., SSL3.0), do not get listed by gnutls-cli. The configuration file feature can be disabled at compile time with an empty --with-system-priority-file. This patch it introduces the function gnutls_get_system_config_file() allowing applications to check whether a configuration file was used. Resolves: #587 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: include top log files in all build failures [ci skip]Nikos Mavrogiannopoulos2019-06-081-0/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>