Skip to content

Refactor resource cleanup in windows path #383

Refactor resource cleanup in windows path

Refactor resource cleanup in windows path #383

Workflow file for this run

name: ML-KEM Interop Tests
on:
push:
branches: [ 'master', 'main', 'release/**' ]
pull_request:
branches: [ '*' ]
workflow_dispatch:
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
env:
OS_REF: ubuntu-latest
WOLFSSL_REF: v5.9.1-stable
OPENSSH_REF: V_10_2_P1
jobs:
build_wolfssl:
name: Build wolfSSL
runs-on: ubuntu-latest
strategy:
fail-fast: false
timeout-minutes: 4
steps:
- name: Checking cache for wolfSSL
uses: actions/cache@v5
id: cache-wolfssl
with:
path: build-dir/
key: wolfssh-mlkem-wolfssl-${{ env.WOLFSSL_REF }}-${{ env.OS_REF }}
lookup-only: true
- name: Checkout, build, and install wolfSSL
if: steps.cache-wolfssl.outputs.cache-hit != 'true'
uses: wolfSSL/actions-build-autotools-project@v1
with:
repository: wolfSSL/wolfssl
ref: ${{ env.WOLFSSL_REF }}
path: wolfssl
configure: --enable-wolfssh --enable-mlkem --enable-ed25519 --enable-ed25519-stream --enable-curve25519 --enable-base64encode --enable-cryptonly --disable-examples --disable-crypttests
check: false
install: true
build_openssh:
name: Build OpenSSH
runs-on: ubuntu-latest
timeout-minutes: 4
steps:
- name: Checking cache for OpenSSH
uses: actions/cache@v5
id: cache-openssh
with:
path: build-dir/
key: wolfssh-mlkem-openssh-${{ env.OPENSSH_REF }}
lookup-only: true
- name: Checkout, build, and install OpenSSH
if: steps.cache-openssh.outputs.cache-hit != 'true'
uses: wolfSSL/actions-build-autotools-project@v1
with:
repository: openssh/openssh-portable
ref: ${{ env.OPENSSH_REF }}
path: openssh
configure: --with-privsep-path=/tmp/empty
check: false
install: true
build_wolfssh:
name: Build and test wolfSSH
needs: [build_wolfssl, build_openssh]
strategy:
fail-fast: false
matrix:
config: [
'',
'--enable-smallstack',
]
runs-on: ubuntu-latest
timeout-minutes: 4
steps:
- name: Checking cache for wolfSSL
uses: actions/cache@v5
with:
path: build-dir/
key: wolfssh-mlkem-wolfssl-${{ env.WOLFSSL_REF }}-${{ env.OS_REF }}
fail-on-cache-miss: true
- name: Checking cache for OpenSSH
uses: actions/cache@v5
with:
path: build-dir/
key: wolfssh-mlkem-openssh-${{ env.OPENSSH_REF }}
fail-on-cache-miss: true
- name: Checkout, build, and test wolfSSH
uses: wolfSSL/actions-build-autotools-project@v1
with:
repository: wolfSSL/wolfssh
path: wolfssh
configure: ${{ matrix.config }} --with-wolfssl=${{ github.workspace }}/build-dir
check: true
- name: Make test key
working-directory: ./wolfssh/
run: |
${{ github.workspace }}/build-dir/bin/ssh-keygen -f $HOME/.ssh/id_ed25519 -N "" -t ed25519
cp $HOME/.ssh/id_ed25519.pub $HOME/.ssh/authorized_keys
- name: Run connect wolfSSH client to OpenSSH server test
working-directory: ./wolfssh/
run: |
mkdir -p /tmp/empty
${{ github.workspace }}/build-dir/sbin/sshd -p 22222 -o KbdInteractiveAuthentication=no -o PasswordAuthentication=no -o KexAlgorithms=mlkem768x25519-sha256
./examples/client/client -u $USER -i $HOME/.ssh/id_ed25519 -j $HOME/.ssh/id_ed25519.pub -c "ls /"