mirror of https://github.com/wolfSSL/wolfssh.git
117 lines
3.6 KiB
YAML
117 lines
3.6 KiB
YAML
name: ML-KEM Interop Tests
|
|
|
|
on:
|
|
push:
|
|
branches: [ 'master', 'main', 'release/**' ]
|
|
pull_request:
|
|
branches: [ '*' ]
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
env:
|
|
OS_REF: ubuntu-latest
|
|
WOLFSSL_REF: v5.9.1-stable
|
|
OPENSSH_REF: V_10_2_P1
|
|
|
|
jobs:
|
|
build_wolfssl:
|
|
name: Build wolfSSL
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
fail-fast: false
|
|
timeout-minutes: 4
|
|
steps:
|
|
- name: Checking cache for wolfSSL
|
|
uses: actions/cache@v5
|
|
id: cache-wolfssl
|
|
with:
|
|
path: build-dir/
|
|
key: wolfssh-mlkem-wolfssl-${{ env.WOLFSSL_REF }}-${{ env.OS_REF }}
|
|
lookup-only: true
|
|
|
|
- name: Checkout, build, and install wolfSSL
|
|
if: steps.cache-wolfssl.outputs.cache-hit != 'true'
|
|
uses: wolfSSL/actions-build-autotools-project@v1
|
|
with:
|
|
repository: wolfSSL/wolfssl
|
|
ref: ${{ env.WOLFSSL_REF }}
|
|
path: wolfssl
|
|
configure: --enable-wolfssh --enable-mlkem --enable-ed25519 --enable-ed25519-stream --enable-curve25519 --enable-base64encode --enable-cryptonly --disable-examples --disable-crypttests
|
|
check: false
|
|
install: true
|
|
|
|
build_openssh:
|
|
name: Build OpenSSH
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 4
|
|
steps:
|
|
- name: Checking cache for OpenSSH
|
|
uses: actions/cache@v5
|
|
id: cache-openssh
|
|
with:
|
|
path: build-dir/
|
|
key: wolfssh-mlkem-openssh-${{ env.OPENSSH_REF }}
|
|
lookup-only: true
|
|
|
|
- name: Checkout, build, and install OpenSSH
|
|
if: steps.cache-openssh.outputs.cache-hit != 'true'
|
|
uses: wolfSSL/actions-build-autotools-project@v1
|
|
with:
|
|
repository: openssh/openssh-portable
|
|
ref: ${{ env.OPENSSH_REF }}
|
|
path: openssh
|
|
configure: --with-privsep-path=/tmp/empty
|
|
check: false
|
|
install: true
|
|
|
|
build_wolfssh:
|
|
name: Build and test wolfSSH
|
|
needs: [build_wolfssl, build_openssh]
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
config: [
|
|
'',
|
|
'--enable-smallstack',
|
|
]
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 4
|
|
steps:
|
|
- name: Checking cache for wolfSSL
|
|
uses: actions/cache@v5
|
|
with:
|
|
path: build-dir/
|
|
key: wolfssh-mlkem-wolfssl-${{ env.WOLFSSL_REF }}-${{ env.OS_REF }}
|
|
fail-on-cache-miss: true
|
|
|
|
- name: Checking cache for OpenSSH
|
|
uses: actions/cache@v5
|
|
with:
|
|
path: build-dir/
|
|
key: wolfssh-mlkem-openssh-${{ env.OPENSSH_REF }}
|
|
fail-on-cache-miss: true
|
|
|
|
- name: Checkout, build, and test wolfSSH
|
|
uses: wolfSSL/actions-build-autotools-project@v1
|
|
with:
|
|
repository: wolfSSL/wolfssh
|
|
path: wolfssh
|
|
configure: ${{ matrix.config }} --with-wolfssl=${{ github.workspace }}/build-dir
|
|
check: true
|
|
|
|
- name: Make test key
|
|
working-directory: ./wolfssh/
|
|
run: |
|
|
${{ github.workspace }}/build-dir/bin/ssh-keygen -f $HOME/.ssh/id_ed25519 -N "" -t ed25519
|
|
cp $HOME/.ssh/id_ed25519.pub $HOME/.ssh/authorized_keys
|
|
|
|
- name: Run connect wolfSSH client to OpenSSH server test
|
|
working-directory: ./wolfssh/
|
|
run: |
|
|
mkdir -p /tmp/empty
|
|
${{ github.workspace }}/build-dir/sbin/sshd -p 22222 -o KbdInteractiveAuthentication=no -o PasswordAuthentication=no -o KexAlgorithms=mlkem768x25519-sha256
|
|
./examples/client/client -u $USER -i $HOME/.ssh/id_ed25519 -j $HOME/.ssh/id_ed25519.pub -c "ls /"
|