.github/workflows/make-check.yml - master - githubmirror/xmlsec

.github/workflows/make-check.yml
365 строк13 KB
lsh123
Bump version to 1.3.13 (#1207)
22 июн 2026, 19:34
22 июн 2026, 19:340b6f603
name: Make Check

on:
  push:
    branches:
          - master
          - xmlsec-1_2_x
  pull_request:
    branches:
          - master
          - xmlsec-1_2_x

jobs:
  # linux: check against latest versions of everything
  check-ubuntu:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        include:
          # default build
          - config_flags:
          # default build with all legacy features
          - config_flags: --enable-experimental-features --enable-legacy-features --enable-ftp --enable-http --enable-gcrypt
          # static openssl build
          - config_flags: --enable-static --enable-static-linking --disable-openssl3-engines --without-nss --without-gnutls --without-gcrypt --enable-experimental-features --enable-legacy-features
          # static gnutls build with GOST
          - config_flags: --enable-static --enable-static-linking --without-openssl --without-nss --without-gcrypt --enable-gost --enable-gost2012 --enable-experimental-features --enable-legacy-features
    steps:
    - name: install dependencies
      run: |
          sudo apt update
          sudo apt install automake autoconf libtool libtool-bin libltdl-dev libltdl7
          sudo apt install libxml2 libxml2-dev libxslt1.1 libxslt1-dev
          sudo apt install libssl3 libssl-dev libnspr4 libnspr4-dev libnss3 libnss3-dev libnss3-tools libgcrypt20 libgcrypt20-dev libgnutls28-dev
    - uses: actions/checkout@v2
    - name: create-build-dirs
      run: |
          mkdir build.dir install.dir
    - name: configure
      working-directory: build.dir
      run: |
          autoreconf -i -f ..
          ../configure --prefix=${GITHUB_WORKSPACE}/install.dir --enable-werror --enable-pedantic ${{ matrix.config_flags }}
    - name: make
      working-directory: build.dir
      run: |
          make
    - name: make check
      working-directory: build.dir
      run: |
          make check
    - name: make install
      working-directory: build.dir
      run: |
          make install
    - name: make examples
      working-directory: examples
      run: |
          export PATH=${GITHUB_WORKSPACE}/install.dir/bin:$PATH
          make

  # linux: docs + distcheck (separate from above to prevent running tests twice for all permutations)
  check-distcheck:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        include:
          # default build
          - config_flags:
    steps:
    - name: install dependencies
      run: |
          sudo apt update
          sudo apt install automake autoconf libtool libtool-bin libltdl-dev libltdl7
          sudo apt install libxml2 libxml2-dev libxslt1.1 libxslt1-dev
          sudo apt install libssl3 libssl-dev libnspr4 libnspr4-dev libnss3 libnss3-dev libnss3-tools libgcrypt20 libgcrypt20-dev libgnutls28-dev
          sudo apt install help2man pandoc doxygen python3
    - uses: actions/checkout@v2
    - name: create-build-dirs
      run: |
          mkdir build.dir install.dir
    - name: configure
      working-directory: build.dir
      run: |
          autoreconf -i -f ..
          ../configure --prefix=${GITHUB_WORKSPACE}/install.dir --enable-werror --enable-pedantic ${{ matrix.config_flags }}
    - name: make
      working-directory: build.dir
      run: |
          make
    - name: make docs
      working-directory: build.dir
      run: |
          make -C docs docs
    - name: make distcheck
      working-directory: build.dir
      run: |
          make distcheck

  # linux: check AWS-LC
  check-ubuntu_aws_lc:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        include:
          # default static build
          - config_flags: --enable-static --enable-static-linking
    env:
      AWS_LC_VERSION: "1.63.0"
    steps:
    - name: install dependencies
      run: |
          sudo apt update
          sudo apt install cmake ninja-build clang perl golang wget
          sudo apt install automake autoconf libtool libtool-bin libltdl-dev libltdl7
          sudo apt install libxml2 libxml2-dev libxslt1.1 libxslt1-dev
    - name: build aws lc
      run: |
          mkdir ../aws-lc && cd ../aws-lc
          wget "https://github.com/aws/aws-lc/archive/refs/tags/v${{ env.AWS_LC_VERSION }}.zip"
          unzip "v${{ env.AWS_LC_VERSION }}.zip"
          mkdir build && cd build
          cmake -GNinja -DCMAKE_BUILD_TYPE=RelWithDebInfo -DCMAKE_INSTALL_PREFIX=${GITHUB_WORKSPACE}/../aws-lc/install ../aws-lc-${{ env.AWS_LC_VERSION }}
          ninja install
    - uses: actions/checkout@v2
    - name: create-build-dirs
      run: |
          mkdir build.dir install.dir
    - name: configure
      working-directory: build.dir
      run: |
          autoreconf -i -f ..
          ../configure --prefix=${GITHUB_WORKSPACE}/install.dir ${{ matrix.config_flags }} \
            --enable-werror --enable-pedantic \
            --with-openssl=${GITHUB_WORKSPACE}/../aws-lc/install \
            --without-gnutls --without-nss --without-gcrypt
    - name: make
      working-directory: build.dir
      run: |
          make
    - name: make check
      working-directory: build.dir
      run: |
          make check
    - name: make install
      working-directory: build.dir
      run: |
          make install

  # macosx
  check-osx:
    runs-on: macos-26
    strategy:
      fail-fast: false
      matrix:
        include:
          # default build
          - config_flags:
          # default build with all legacy features -- not possible because MacOSX disables RIPEMD160 in OpenSSL
          # - config_flags: --enable-experimental-features --enable-legacy-features --enable-ftp --enable-http
    steps:
    - name: Set up Homebrew
      id: set-up-homebrew
      uses: Homebrew/actions/setup-homebrew@master
    - name: install dependencies
      run: |
          pkg-config --modversion libxml-2.0
          pkg-config --modversion libxslt
          HOMEBREW_NO_AUTO_UPDATE=1 HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK=1 brew install autoconf
          HOMEBREW_NO_AUTO_UPDATE=1 HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK=1 brew install automake
          HOMEBREW_NO_AUTO_UPDATE=1 HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK=1 brew install pkg-config libtool
          HOMEBREW_NO_AUTO_UPDATE=1 HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK=1 brew install libxml2 libxslt
          HOMEBREW_NO_AUTO_UPDATE=1 HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK=1 brew install openssl nspr nss gnutls libgcrypt
    - uses: actions/checkout@v2
    - name: create-build-dirs
      run: |
          mkdir build.dir install.dir
    - name: configure
      working-directory: build.dir
      # NSS build is disabled because of header errors, try to re-enable in 2026 to see if it is fixed
      #  --with-nspr=`brew --prefix nspr` \
      #  --with-nss=`brew --prefix nss` \
      run: |
          autoreconf -i -f ..
          ../configure --prefix=${GITHUB_WORKSPACE}/install.dir  --enable-werror --enable-pedantic \
            --with-openssl=`brew --prefix openssl` \
            --without-nss \
            --with-gnutls=`brew --prefix gnutls` \
            --with-gcrypt=`brew --prefix libgcrypt` \
            ${{ matrix.config_flags }}
    - name: make
      working-directory: build.dir
      run: |
          make
    - name: make check
      working-directory: build.dir
      run: |
          export PATH=`brew --prefix openssl`/bin:$PATH
          export LD_LIBRARY_PATH=`brew --prefix openssl`/lib:$LD_LIBRARY_PATH
          export LD_LIBRARY_PATH=`brew --prefix nspr`/lib:$LD_LIBRARY_PATH
          export LD_LIBRARY_PATH=`brew --prefix nss`/lib:$LD_LIBRARY_PATH
          export LD_LIBRARY_PATH=`brew --prefix libgcrypt`/lib:$LD_LIBRARY_PATH
          export LD_LIBRARY_PATH=`brew --prefix gnutls`/lib:$LD_LIBRARY_PATH
          make check
    - name: make install
      working-directory: build.dir
      run: |
          make install
    - name: make examples
      working-directory: examples
      run: |
          export PATH=${GITHUB_WORKSPACE}/install.dir/bin:$PATH
          make

  # mingw
  check-mingw:
    runs-on: windows-latest
    strategy:
      fail-fast: false
      matrix:
        include:
          # default build
          - msystem: MINGW64
            arch: x86_64
            config_flags: --without-openssl --without-nss --without-gnutls --without-gcrypt --with-mscng --with-mscrypto
          # no unicode static build for mscng
          - msystem: MINGW64
            arch: x86_64
            config_flags: --enable-static --enable-static-linking --enable-unicode=no --without-openssl --without-nss --without-gnutls --without-gcrypt --without-mscrypto
    defaults:
      run:
        shell: msys2 {0}
    steps:
    - uses: msys2/setup-msys2@v2
      with:
        msystem: ${{ matrix.msystem }}
        release: false
        update: false
        install: >-
          autoconf
          automake
          base-devel
          git
          libtool
          mingw-w64-${{ matrix.arch }}-toolchain
          mingw-w64-${{ matrix.arch }}-libxml2
          mingw-w64-${{ matrix.arch }}-libxslt
          mingw-w64-${{ matrix.arch }}-libltdl
          mingw-w64-${{ matrix.arch }}-openssl
          mingw-w64-${{ matrix.arch }}-libgcrypt
          mingw-w64-${{ matrix.arch }}-gnutls
    - name: configure-git
      run: |
          git config --global core.autocrlf input
      shell: bash
    - uses: actions/checkout@v2
    - name: create-dirs
      run: |
          mkdir build.dir install.dir
      shell: bash
    - name: configure
      working-directory: build.dir
      run: |
          autoreconf -i -f ..
          ../configure --prefix=`cygpath -u "${GITHUB_WORKSPACE}/install.dir"` --enable-werror  --enable-pedantic \
              --enable-mscrypto --enable-mscng ${{ matrix.config_flags }} \
              --build="${{ matrix.arch }}-w64-mingw32" \
              --host="${{ matrix.arch }}-w64-mingw32"
    - name: make
      working-directory: build.dir
      run: |
          make
    - name: make check
      working-directory: build.dir
      run: |
          make check
    - name: make install
      working-directory: build.dir
      run: |
          make install
    - name: make examples
      working-directory: examples
      run: |
          export PATH=${GITHUB_WORKSPACE}/install.dir/bin:$PATH
          make

  # msvc
  check-msvc:
    runs-on: windows-latest
    strategy:
      fail-fast: false
      matrix:
        include:
          # mscng: default build
          - crypto: mscng
            config_flags: unicode=yes
          # mscng: no unicode, legacy crypto
          - crypto: mscng
            config_flags: unicode=no legacy-features=yes
          # mscrypto: default build
          - crypto: mscrypto
            config_flags: unicode=yes
          # mscrypto: no unicode, legacy crypto
          - crypto: mscrypto
            config_flags:  unicode=no legacy-features=yes
          # mscng: default build
          - crypto: openssl-300
            config_flags: unicode=yes
          # mscng: no unicode, legacy crypto
          - crypto: openssl-300
            config_flags: unicode=no
    env:
      INSTALL_FOLDER: c:\install.dir
      LIBS_VERSION: 1.3.12
    steps:
    - name: create-dirs
      run: |
          mkdir ${{ env.INSTALL_FOLDER }}
    - name: install dependencies
      shell: pwsh
      working-directory: ${{ env.INSTALL_FOLDER }}
      env:
        LIBS_URL: "https://github.com/lsh123/xmlsec/releases/download/${{ env.LIBS_VERSION }}/xmlsec1-${{ env.LIBS_VERSION }}-win64.zip"
        LIBS_FILE: "xmlsec1-${{ env.LIBS_VERSION }}-win64.zip"
      run: |
          Invoke-WebRequest ${{ env.LIBS_URL }} -OutFile ${{ env.LIBS_FILE }}
          Expand-Archive -Path ${{ env.LIBS_FILE }}  -DestinationPath "."
    - name: configure-git
      shell: bash
      run: |
          git config --global core.autocrlf input
    - uses: actions/checkout@v2
    - uses: ilammy/msvc-dev-cmd@v1
      with:
        arch: x64
    - name: configure
      working-directory: win32
      shell: cmd
      run: |
          powershell -ExecutionPolicy Bypass -File configure.ps1 pedantic=yes static=no cruntime=/MD debug=no memcheck=no ^
              crypto=${{ matrix.crypto }} ${{ matrix.config_flags }} ^
              prefix=${{ env.INSTALL_FOLDER }}\xmlsec.build ^
              include=${{ env.INSTALL_FOLDER }}\libxml2\include;${{ env.INSTALL_FOLDER }}\libxml2\include\libxml2;${{ env.INSTALL_FOLDER }}\libxslt\include;${{ env.INSTALL_FOLDER }}\openssl\include;%MSSDK_INCLUDE% ^
              lib=${{ env.INSTALL_FOLDER }}\libxml2\lib;${{ env.INSTALL_FOLDER }}\libxslt\lib;${{ env.INSTALL_FOLDER }}\openssl\lib;%MSSDK_LIB%
    - name: make
      working-directory: win32
      shell: cmd
      run: |
          set PATH=${{ env.INSTALL_FOLDER }}\libxml2\bin;${{ env.INSTALL_FOLDER }}\libxslt\bin;${{ env.INSTALL_FOLDER }}\openssl\bin;%PATH%
          nmake
    - name: make check
      working-directory: win32
      shell: cmd
      run: |
          set PATH=${{ env.INSTALL_FOLDER }}\libxml2\bin;${{ env.INSTALL_FOLDER }}\libxslt\bin;${{ env.INSTALL_FOLDER }}\openssl\bin;%PATH%
          set OPENSSL_MODULES=${{ env.INSTALL_FOLDER }}\lib\ossl-modules
          nmake check
    - name: make install
      working-directory: win32
      shell: cmd
      run: |
          nmake install