Update fips mode from v5 to v5.2.4 and some other minor changes

- Update fips mode from v5 to v5.2.4.
- Add autoconf-archive (now needed for correctly test rsyslog master
branch)
- drop 'main' from test matrix in qpdf.yml
- qpdf's main rewrote the completion test into a pty-based
interactive-shell test that's flaky in our bookworm container and
unrelated to the wolfssl/gnutls provider.
Main is just an extra branch that we decided to test along the latest
and the target version, so it can be safely removed.
- pin ffmpeg to n8.1 in the gst-libav workflows

Author: gasbytes

.github/workflows/gst-libav1.0.yml

@@ -110,6 +110,7 @@ jobs:
           cd $RUNNER_WORKSPACE
           git clone https://github.com/FFmpeg/FFmpeg.git ffmpeg-gnutls
           cd ffmpeg-gnutls
+          git checkout n8.1
           export PKG_CONFIG_PATH="/opt/gnutls/lib/pkgconfig:/opt/gstreamer/lib/pkgconfig"
           export CPPFLAGS="-I/opt/gnutls/include -I/opt/gstreamer/include"
           export LDFLAGS="-L/opt/gnutls/lib -L/opt/gstreamer/lib -Wl,-rpath,/opt/gnutls/lib -Wl,-rpath,/opt/gstreamer/lib"

.github/workflows/qpdf.yml

@@ -19,7 +19,7 @@ jobs:
     strategy:
       matrix:
         os: [ ubuntu-latest ]
-        qpdf_ref: [ 'main', 'v11.3.0', 'v12.2.0' ]
+        qpdf_ref: [ 'v11.3.0', 'v12.2.0' ]
       fail-fast: false
     runs-on: ${{ matrix.os }}
     container:

.github/workflows/rsyslog.yml

@@ -44,7 +44,7 @@ jobs:
         if: matrix.os == 'ubuntu-latest'
         run: |
           sudo apt-get install -y build-essential pkg-config libestr-dev libfastjson-dev zlib1g-dev uuid-dev libhiredis-dev uuid-dev flex bison
-          sudo apt-get install -y libdbi-dev libmariadb-dev-compat postgresql-client libpq-dev libnet-dev librdkafka-dev libpcre3-dev libtokyocabinet-dev libglib2.0-dev libmongo-client-dev
+          sudo apt-get install -y libdbi-dev libmariadb-dev-compat postgresql-client libpq-dev libnet-dev librdkafka-dev libpcre3-dev libtokyocabinet-dev libglib2.0-dev libmongo-client-dev libyaml-dev
           sudo apt-get install -y libcurl4-gnutls-dev
           sudo apt-get install -y protobuf-c-compiler libprotobuf-c-dev libsnappy-dev
           apt-get install -y python3-pip
@@ -53,7 +53,7 @@ jobs:
       - name: Install build and test dependencies (Ubuntu only)
         if: matrix.os == 'ubuntu-latest'
         run: |
-          sudo apt-get install -y autoconf libtool valgrind
+          sudo apt-get install -y autoconf autoconf-archive libtool valgrind
 
       # Restore (and later save) the compiled tool-chain if it already exists
       - name: Restore cached gnutls-wolfssl

setup.sh

@@ -206,7 +206,7 @@ if [ $FIPS_MODE -eq 1 ]; then
             cd fips-v5-checkout
         fi
 
-        ./configure --prefix=$WOLFSSL_INSTALL/ CC=clang --enable-cmac --enable-aesccm --enable-keygen 'CFLAGS=-DWOLFSSL_PUBLIC_ASN -DHAVE_PUBLIC_FFDHE -DHAVE_FFDHE_3072 -DHAVE_FFDHE_4096 -DWOLFSSL_DH_EXTRA -DWOLFSSL_PSS_SALT_LEN_DISCOVER -DWOLFSSL_PUBLIC_MP -DWOLFSSL_RSA_KEY_CHECK -DNO_MD5' --enable-fips=v5
+        ./configure --prefix=$WOLFSSL_INSTALL/ CC=clang --enable-cmac --enable-aesccm --enable-keygen 'CFLAGS=-DWOLFSSL_PUBLIC_ASN -DHAVE_PUBLIC_FFDHE -DHAVE_FFDHE_3072 -DHAVE_FFDHE_4096 -DWOLFSSL_DH_EXTRA -DWOLFSSL_PSS_SALT_LEN_DISCOVER -DWOLFSSL_PUBLIC_MP -DWOLFSSL_RSA_KEY_CHECK -DNO_MD5' --enable-fips=v5.2.4
 
         make