summaryrefslogtreecommitdiff
path: root/.gitlab-ci.yml
Commit message (Collapse)AuthorAgeFilesLines
* Use make with crafted -j for CI builds and testsTim Rühsen2020-01-261-60/+73
| | | | | | | This speeds up the Gitlab CI runners. E.g. measured timings of the Debian.x86_64 runner show ~40% speedup (down from 38 to 23 minutes). Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* .gitlab-ci.yml: remove --disable-gost from nettle-master testDmitry Baryshkov2020-01-241-1/+1
| | | | | | | Remove --disable-gost switch from the test using Nettle's master branch as GnuTLS is now compatible again with nettle/master. Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
* .gitlab-ci.yml: force running jobs on linux runnersNikos Mavrogiannopoulos2020-01-241-0/+17
| | | | | | | There are shared windows runners in gitlab, that will fail running our jobs. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: set WINEPATH to allow eccdata run under WineDaiki Ueno2020-01-231-0/+4
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* .gitlab-ci.yml: export LDFLAGS throughout the FreeBSD buildDaiki Ueno2020-01-231-2/+3
| | | | | | Otherwise the build process wouldn't be able to find -lgmp. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* .gitlab-ci.yml: add target to build against nettle masterDaiki Ueno2020-01-231-0/+31
| | | | | | | | This is similar to the build/gnutls target in nettle's own gitlab CI. The only difference is that this will build/test all branches of GnuTLS against the master branch of nettle. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* nettle: vendor in Curve448 and Ed448 implementationDaiki Ueno2020-01-231-1/+1
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* CI: FIPS140-2 run make check without enforcing FIPS modeDmitry Eremin-Solenikov2020-01-101-0/+1
| | | | | | | | Some distributions might enable --enable-fips140-mode, without actually enabling/enforcing FIPS at runtime. Catch issues in such configurations (reported by Daiki Ueno). Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* .gitlab-ci.yml: identify on runtime to db2epub directoryNikos Mavrogiannopoulos2020-01-031-2/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Remove && command concatenation in .gitlab-ci.ymlTim Rühsen2020-01-031-52/+65
| | | | | | | | As it turns out, `set -e` doesn't work if one of the commands fail, maybe except the last command. Seen, tested and reproduced on Fedora28 image. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* .gitlab-ci.yml: merged ASAN and UBSAN runstmp-check-fuzzNikos Mavrogiannopoulos2020-01-031-35/+8
| | | | | | | This in addition to merging the two CI runs, it also attempts to run the fuzz code under SHANI for CI. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* UBSAN: Fail tests if UB detectedTim Rühsen2020-01-031-13/+12
| | | | | | | Suppressions are in devel/ubsan.supp. Suppressions only work on recoverable checks. Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* ecore cli: updated and rewritten to use libevNikos Mavrogiannopoulos2020-01-031-1/+1
| | | | | | | | | That removes a lot of code that was not necessary in the gnutls test suite. Resolves: #884 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: use separate images for mingw and fedora buildsNikos Mavrogiannopoulos2020-01-031-5/+6
| | | | | | This should result to faster image loading for CI builds. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* x509: do not tolerate invalid DER timeNikos Mavrogiannopoulos2019-12-261-1/+1
| | | | | | | | | | | This effectively reverts !400 and ensures that we no longer tolerate invalid DER time. This complements the previous commit by Lili Quan and ensures we provide the --disable-strict-der-time backwards compatibility option. Resolves: #207 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* libopts: include new files into disttmp-libopts-fixNikos Mavrogiannopoulos2019-12-021-0/+2
| | | | | | | | | This also includes --enable-local-libopts flag to make dist to catch future regressions. Resolves: #867 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* gitlab-ci: enable running make check on minimal buildDmitry Eremin-Solenikov2019-11-221-0/+1
| | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* .gitlab-ci.yml: bump configure cache versiontmp-cfb8-fixesDaiki Ueno2019-11-081-1/+1
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* .gitlab-ci.yml: do not inline strcmp in valgrind buildNikos Mavrogiannopoulos2019-11-011-2/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: removed unnecessary use of --enable-valgrind-testsNikos Mavrogiannopoulos2019-11-011-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: updated CI environment to F31Nikos Mavrogiannopoulos2019-10-301-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: removed coverity build [ci skip]Nikos Mavrogiannopoulos2019-10-101-24/+0
| | | | | | | | | | | | The coverity run is subject to several restrictions by the service, and thus it is not really useful in the main CI runs as it cannot reasonably be run on MRs or master. As such we simplify the main CI file by moving the coverity to the coverage sub-project and running it weekly. The new location is at: https://gitlab.com/gnutls/coverage Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: only run coverity task on 3_6_x tags [ci skip]Nikos Mavrogiannopoulos2019-10-081-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: include an automated coverity build on tagsNikos Mavrogiannopoulos2019-10-071-0/+24
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: run pic-check on i686-linux-gnu to catch wrong assemblyNikos Mavrogiannopoulos2019-09-281-0/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Merge branch 'wip-guile-include-m4-macros' into 'master'Daiki Ueno2019-09-161-1/+10
|\ | | | | | | | | maint: Include Guile's M4 macros. See merge request gnutls/gnutls!1061
| * .gitlab-ci.yml: bump configure cache versiontmp-guile-include-m4-macrosDaiki Ueno2019-09-111-1/+1
| | | | | | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * .gitlab-ci.yml: export guile related envvars for doc-dist.FedoraDaiki Ueno2019-09-111-1/+9
| | | | | | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
| * .gitlab-ci.yml: minimal.Fedora.x86_64: Pass '--disable-guile' the 2nd time ↵Ludovic Courtès2019-09-051-0/+1
| | | | | | | | | | | | as well. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
| * .gitlab-ci.yml: doc-dist.Fedora: Pass "GUILE", "GUILD", and "guile_snarf" to ↵Ludovic Courtès2019-09-051-1/+1
| | | | | | | | | | | | 'configure'. Signed-off-by: Ludovic Courtès <ludo@gnu.org>
* | tests: added interoperability test with gnutls 2.12.xNikos Mavrogiannopoulos2019-09-011-1/+2
|/ | | | | | This enables this test in debian build. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* config: added ability to override and mark algorithms as disabledNikos Mavrogiannopoulos2019-06-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | This allows the system administrator or the distributor to use the gnutls configuration file to mark hashes, signature algorithms, TLS versions, curves, groups, ciphers KX, and MAC algorithms as insecure (the last four only in the context of a TLS session). It also allows to set a minimum profile which the applications cannot fall below. The options intentionally do not allow marking algorithms as secure so that the configuration file cannot be used as an attack vector. This change also makes sure that unsupported and disabled protocols during compile time (e.g., SSL3.0), do not get listed by gnutls-cli. The configuration file feature can be disabled at compile time with an empty --with-system-priority-file. This patch it introduces the function gnutls_get_system_config_file() allowing applications to check whether a configuration file was used. Resolves: #587 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: include top log files in all build failures [ci skip]Nikos Mavrogiannopoulos2019-06-081-0/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: switched fedora to latest versionNikos Mavrogiannopoulos2019-06-011-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Do not regenerate autogen files if --enable-local-libopts is giventmp-fix-liboptsNikos Mavrogiannopoulos2019-05-291-0/+4
| | | | | | | | | | | | This addresses issue on installed systems which have autogen but use --enable-local-libopts. In these systems if the installed autogen would not match the local libopts library version compilation would fail because the auto-generated files depend on the corresponding to autogen version libopts internals. Resolves: #772 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: ensure that the LIBS variable is empty after a configure runtmp-avoid-libs-in-libsvarNikos Mavrogiannopoulos2019-05-241-0/+1
| | | | | | | | We do not use this variable as it is global and applies to all of tests, applications and library, and when it is set it is usually due to bugs in configure.ac. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* ci: refresh the cache due to failures in debianAlon Bar-Lev2019-04-091-1/+1
| | | | Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* nettle: include config.h before checking for definitionstmp-cmac-cfb8-fixNikos Mavrogiannopoulos2019-04-061-1/+1
| | | | | | | | | This makes sure that we don't include the internal backport if compiled with a version of nettle that includes that code. We also exclude nettle/backport from the static analyzer's list as it contains files outside our control (from nettle project). Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: do not run commit-check on master branchNikos Mavrogiannopoulos2019-04-031-0/+2
| | | | | | That is, because there are no diffs to check. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Let check_if_signed fail if git failstmp-fail-sigcheckTim Rühsen2019-03-281-1/+1
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* .gitlab-ci.yml: updated cache key nameNikos Mavrogiannopoulos2019-03-131-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: Test FIPS HMAC self-testAnderson Toshiyuki Sasaki2019-03-041-2/+2
| | | | | | This enables the integrity self-tests in FIPS140 test build. Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
* .gitlab-ci.yml: added thread sanitizer runtmp-false-start-clarificationsNikos Mavrogiannopoulos2019-03-021-5/+29
| | | | | | | This checks for unsafe uses of variables in our included threaded tests. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* Check for Signed-off-by: in CITim Rühsen2019-01-201-0/+18
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* Unroll MinGW CI runner commandstmp-unroll-ci-commandsTim Rühsen2019-01-041-13/+18
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* .gitlab-ci.yml: Remove assert in gl/tests/test-strerror.cTim Rühsen2018-12-181-0/+1
| | | | | | | A bug made our CI cross builds fail. See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916779 Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* .gitlab-ci.yml: run coverage build over fedoraNikos Mavrogiannopoulos2018-11-161-2/+2
| | | | | | This will include the TPM subsystem in the coverage report. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: copy the log files of minimal.Fedora to the gitlab serverStefan Berger2018-11-161-0/+9
| | | | Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
* tls13: use system's openssl for interop testingNikos Mavrogiannopoulos2018-11-101-3/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* .gitlab-ci.yml: move to fedora29 for CINikos Mavrogiannopoulos2018-11-091-31/+45
| | | | | | | | | This also moves the x86 CI builds to the debian cross infrastructure as we have a more reliable way of generating a 32-bit image. Resolves #607 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
View Lorry Controller Status