Merge pull request #83 from gasbytes/update-fips-version

Update FIPS version and some other minor changes to the ci/cd

Author: SparkiDev

.github/workflows/gst-libav1.0.yml

@@ -110,6 +110,7 @@ jobs:
           cd $RUNNER_WORKSPACE
           git clone https://github.com/FFmpeg/FFmpeg.git ffmpeg-gnutls
           cd ffmpeg-gnutls
+          git checkout n8.1
           export PKG_CONFIG_PATH="/opt/gnutls/lib/pkgconfig:/opt/gstreamer/lib/pkgconfig"
           export CPPFLAGS="-I/opt/gnutls/include -I/opt/gstreamer/include"
           export LDFLAGS="-L/opt/gnutls/lib -L/opt/gstreamer/lib -Wl,-rpath,/opt/gnutls/lib -Wl,-rpath,/opt/gstreamer/lib"

.github/workflows/qpdf.yml

@@ -19,7 +19,7 @@ jobs:
     strategy:
       matrix:
         os: [ ubuntu-latest ]
-        qpdf_ref: [ 'main', 'v11.3.0', 'v12.2.0' ]
+        qpdf_ref: [ 'v11.3.0', 'v12.2.0' ]
       fail-fast: false
     runs-on: ${{ matrix.os }}
     container:

.github/workflows/rsyslog.yml

@@ -44,7 +44,7 @@ jobs:
         if: matrix.os == 'ubuntu-latest'
         run: |
           sudo apt-get install -y build-essential pkg-config libestr-dev libfastjson-dev zlib1g-dev uuid-dev libhiredis-dev uuid-dev flex bison
-          sudo apt-get install -y libdbi-dev libmariadb-dev-compat postgresql-client libpq-dev libnet-dev librdkafka-dev libpcre3-dev libtokyocabinet-dev libglib2.0-dev libmongo-client-dev
+          sudo apt-get install -y libdbi-dev libmariadb-dev-compat postgresql-client libpq-dev libnet-dev librdkafka-dev libpcre3-dev libtokyocabinet-dev libglib2.0-dev libmongo-client-dev libyaml-dev
           sudo apt-get install -y libcurl4-gnutls-dev
           sudo apt-get install -y protobuf-c-compiler libprotobuf-c-dev libsnappy-dev
           apt-get install -y python3-pip
@@ -53,7 +53,7 @@ jobs:
       - name: Install build and test dependencies (Ubuntu only)
         if: matrix.os == 'ubuntu-latest'
         run: |
-          sudo apt-get install -y autoconf libtool valgrind
+          sudo apt-get install -y autoconf autoconf-archive libtool valgrind
 
       # Restore (and later save) the compiled tool-chain if it already exists
       - name: Restore cached gnutls-wolfssl

.github/workflows/xmlsec.yml

@@ -17,7 +17,7 @@ jobs:
     strategy:
       matrix:
         os: [ ubuntu-24.04 ]
-        xmlsec_ref: [ 'master', '1.3.4', '1.3.9' ]
+        xmlsec_ref: [ '1.3.4', '1.3.9' ]
       fail-fast: false
     runs-on: ${{ matrix.os }}
 
@@ -111,9 +111,7 @@ jobs:
       - name: Setup and build xmlsec
         working-directory: xmlsec
         run: |
-          if [[ "${{ matrix.xmlsec_ref }}" != "master" ]]; then
-            git checkout ${{ matrix.xmlsec_ref }}
-          fi
+          git checkout ${{ matrix.xmlsec_ref }}
           export PKG_CONFIG_PATH=/opt/nettle/lib64/pkgconfig:/opt/nettle/lib/pkgconfig:/opt/gnutls/lib/pkgconfig:$PKG_CONFIG_PATH
           export LD_LIBRARY_PATH=/opt/nettle/lib64:/opt/nettle/lib:/opt/gnutls/lib:$LD_LIBRARY_PATH
           ./autogen.sh
@@ -146,13 +144,6 @@ jobs:
         run: |
           export PKG_CONFIG_PATH=/opt/nettle/lib64/pkgconfig:/opt/nettle/lib/pkgconfig:/opt/gnutls/lib/pkgconfig:$PKG_CONFIG_PATH
           export LD_LIBRARY_PATH=/opt/nettle/lib64:/opt/nettle/lib:/opt/gnutls/lib:$LD_LIBRARY_PATH
-          if [[ "${{ matrix.xmlsec_ref }}" == "master" ]]; then
-            # Master branch added post-quantum crypto tests (ML-DSA, SLH-DSA) that are not
-            # supported by gnutls-wolfssl, causing success rate to drop below 80% threshold.
-            # This variable bypasses the percentage check for intentionally unsupported features.
-            export XMLSEC_TEST_IGNORE_PERCENT_SUCCESS=1
-          fi
-
           export WGW_LOGGING=1
           make check
           find /tmp -name "*.log" | xargs grep wgw

setup.sh

@@ -206,7 +206,7 @@ if [ $FIPS_MODE -eq 1 ]; then
             cd fips-v5-checkout
         fi
 
-        ./configure --prefix=$WOLFSSL_INSTALL/ CC=clang --enable-cmac --enable-aesccm --enable-keygen 'CFLAGS=-DWOLFSSL_PUBLIC_ASN -DHAVE_PUBLIC_FFDHE -DHAVE_FFDHE_3072 -DHAVE_FFDHE_4096 -DWOLFSSL_DH_EXTRA -DWOLFSSL_PSS_SALT_LEN_DISCOVER -DWOLFSSL_PUBLIC_MP -DWOLFSSL_RSA_KEY_CHECK -DNO_MD5' --enable-fips=v5
+        ./configure --prefix=$WOLFSSL_INSTALL/ CC=clang --enable-cmac --enable-aesccm --enable-keygen 'CFLAGS=-DWOLFSSL_PUBLIC_ASN -DHAVE_PUBLIC_FFDHE -DHAVE_FFDHE_3072 -DHAVE_FFDHE_4096 -DWOLFSSL_DH_EXTRA -DWOLFSSL_PSS_SALT_LEN_DISCOVER -DWOLFSSL_PUBLIC_MP -DWOLFSSL_RSA_KEY_CHECK -DNO_MD5' --enable-fips=v5.2.4
 
         make