From e60cffb9acb8df02d8b0546e5377bff7ac208924 Mon Sep 17 00:00:00 2001 From: Aidan Garske Date: Mon, 15 Dec 2025 15:30:06 -0800 Subject: [PATCH 1/5] Add EC public key auto derivation from private key --- src/wp_ecc_kmgmt.c | 22 +++++++ test/test_ecc.c | 150 ++++++++++++++++++++++++++++++++++++++++++++- test/unit.c | 1 + test/unit.h | 1 + 4 files changed, 172 insertions(+), 2 deletions(-) diff --git a/src/wp_ecc_kmgmt.c b/src/wp_ecc_kmgmt.c index 6600a685..e2a8e4d2 100644 --- a/src/wp_ecc_kmgmt.c +++ b/src/wp_ecc_kmgmt.c @@ -1149,6 +1149,28 @@ static int wp_ecc_import_keypair(wp_Ecc* ecc, const OSSL_PARAM params[], ) { ecc->key.type = ECC_PRIVATEKEY; ecc->hasPriv = 1; + + /* Auto-derive public key if not already present and curve is + * set with OpenSSL version newer than 3.6.0 */ +#if OPENSSL_VERSION_NUMBER > 0x30600000L + if (!ecc->hasPub && ecc->curveId != 0) { + int rc; + + rc = wc_ecc_set_curve(&ecc->key, 0, ecc->curveId); + if (rc == 0) { +#ifdef ECC_TIMING_RESISTANT + rc = wc_ecc_make_pub_ex(&ecc->key, NULL, &ecc->rng); +#else + rc = wc_ecc_make_pub_ex(&ecc->key, NULL, NULL); +#endif + /* Indicate public key is available if derivation succeeds */ + if (rc == 0) { + ecc->key.type = ECC_PRIVATEKEY; + ecc->hasPub = 1; + } + } + } +#endif /* OPENSSL_VERSION_NUMBER > 0x30600000L 3.6.0+ */ } WOLFPROV_LEAVE(WP_LOG_COMP_ECC, __FILE__ ":" WOLFPROV_STRINGIZE(__LINE__), ok); diff --git a/test/test_ecc.c b/test/test_ecc.c index 2cd21cf4..b188cef3 100644 --- a/test/test_ecc.c +++ b/test/test_ecc.c @@ -1877,7 +1877,51 @@ static int test_ec_import_priv(void) err = EVP_PKEY_fromdata(ctx2, &pkey2, EVP_PKEY_KEYPAIR, params) != 1; } - /* For imported private only keys, get bn params should fail */ + /* For imported private only keys, public key params behavior depends on OpenSSL version */ +#if OPENSSL_VERSION_NUMBER > 0x30600000L + /* OpenSSL 3.6.0+ auto-derives public keys from private keys */ + if (err == 0) { + err = EVP_PKEY_get_bn_param(pkey1, OSSL_PKEY_PARAM_EC_PUB_X, &x1) != 1; + } + if (err == 0) { + err = EVP_PKEY_get_bn_param(pkey2, OSSL_PKEY_PARAM_EC_PUB_X, &x2) != 1; + } + if (err == 0) { + err = EVP_PKEY_get_bn_param(pkey1, OSSL_PKEY_PARAM_EC_PUB_Y, &y1) != 1; + } + if (err == 0) { + err = EVP_PKEY_get_bn_param(pkey2, OSSL_PKEY_PARAM_EC_PUB_Y, &y2) != 1; + } + + /* Verify public key is available */ + if (err == 0) { + if (EVP_PKEY_get_octet_string_param(pkey1, + OSSL_PKEY_PARAM_PUB_KEY, NULL, 0, (size_t *)&len) != 1) { + err = 1; + } + } + if (err == 0) { + if (EVP_PKEY_get_octet_string_param(pkey2, + OSSL_PKEY_PARAM_PUB_KEY, NULL, 0, (size_t *)&len) != 1) { + err = 1; + } + } + + /* Verify encoded public key is available */ + if (err == 0) { + if (EVP_PKEY_get_octet_string_param(pkey1, + OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY, NULL, 0, (size_t *)&len) != 1) { + err = 1; + } + } + if (err == 0) { + if (EVP_PKEY_get_octet_string_param(pkey2, + OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY, NULL, 0, (size_t *)&len) != 1) { + err = 1; + } + } +#else + /* OpenSSL < 3.6.0: private-only keys should not have public components */ if (err == 0) { err = EVP_PKEY_get_bn_param(pkey1, OSSL_PKEY_PARAM_EC_PUB_X, &x1) == 1; } @@ -1918,7 +1962,8 @@ static int test_ec_import_priv(void) err = 1; } } -#endif +#endif /* OPENSSL_VERSION_NUMBER >= 0x30006000L 3.0.6+ */ +#endif /* OPENSSL_VERSION_NUMBER > 0x30600000L 3.6.0+ */ EVP_PKEY_free(pkey1); EVP_PKEY_free(pkey2); @@ -2060,4 +2105,105 @@ int test_ec_null_init(void* data) return err; } +#if OPENSSL_VERSION_NUMBER > 0x30600000L +static int test_ec_auto_derive_pub(void) +{ + int err = 0; + EVP_PKEY_CTX *ctx = NULL; + EVP_PKEY* pkey = NULL; + OSSL_PARAM *params = NULL; + OSSL_PARAM_BLD *bld = NULL; + BIGNUM* priv = NULL; + BIGNUM* pub_x = NULL; + BIGNUM* pub_y = NULL; + unsigned char pub_key[65] = {0}; + size_t pub_key_len = sizeof(pub_key); + + /* Build params with private key only (no public key) */ + err = (bld = OSSL_PARAM_BLD_new()) == NULL; + if (err == 0) { + err = OSSL_PARAM_BLD_push_utf8_string(bld, OSSL_PKEY_PARAM_GROUP_NAME, + ecc_p256_group_str, 0) != 1; + } + if (err == 0) { + err = (priv = BN_bin2bn(ecc_p256_priv, sizeof(ecc_p256_priv), NULL)) == NULL; + } + if (err == 0) { + err = OSSL_PARAM_BLD_push_BN(bld, OSSL_PKEY_PARAM_PRIV_KEY, priv) != 1; + } + if (err == 0) { + err = (params = OSSL_PARAM_BLD_to_param(bld)) == NULL; + } + /* Import key using wolfProvider */ + if (err == 0) { + err = (ctx = EVP_PKEY_CTX_new_from_name(wpLibCtx, "EC", NULL)) == NULL; + } + if (err == 0) { + err = EVP_PKEY_fromdata_init(ctx) != 1; + } + if (err == 0) { + err = EVP_PKEY_fromdata(ctx, &pkey, EVP_PKEY_KEYPAIR, params) != 1; + } + /* Verify public X coordinate is available (auto-derived) */ + if (err == 0) { + err = EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_EC_PUB_X, &pub_x) != 1; + } + /* Verify public Y coordinate is available (auto-derived) */ + if (err == 0) { + err = EVP_PKEY_get_bn_param(pkey, OSSL_PKEY_PARAM_EC_PUB_Y, &pub_y) != 1; + } + /* Verify public key octet string is available */ + if (err == 0) { + err = EVP_PKEY_get_octet_string_param(pkey, OSSL_PKEY_PARAM_PUB_KEY, + pub_key, pub_key_len, &pub_key_len) != 1; + } + if (err == 0) { + if (pub_key_len == 0 || pub_key_len > sizeof(pub_key)) { + err = 1; + } + } + /* Verify encoded public key is available */ + if (err == 0) { + pub_key_len = sizeof(pub_key); + err = EVP_PKEY_get_octet_string_param(pkey, OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY, + pub_key, pub_key_len, &pub_key_len) != 1; + } + if (err == 0) { + if (pub_key_len == 0 || pub_key_len > sizeof(pub_key)) { + err = 1; + } + } + /* Verify the derived public key is valid (non-zero coordinates) */ + if (err == 0) { + if (BN_is_zero(pub_x) || BN_is_zero(pub_y)) { + err = 1; + } + } + + EVP_PKEY_free(pkey); + EVP_PKEY_CTX_free(ctx); + OSSL_PARAM_free(params); + OSSL_PARAM_BLD_free(bld); + BN_clear_free(priv); + BN_free(pub_x); + BN_free(pub_y); + + return err; +} +#endif /* OPENSSL_VERSION_NUMBER > 0x30600000L */ + +int test_ec_auto_derive_pubkey(void* data) +{ + int err = 0; + (void)data; + +#if OPENSSL_VERSION_NUMBER > 0x30600000L + err = test_ec_auto_derive_pub(); +#else + err = 0; +#endif + + return err; +} + #endif /* WP_HAVE_ECC */ diff --git a/test/unit.c b/test/unit.c index a55a5bcf..399b3eb2 100644 --- a/test/unit.c +++ b/test/unit.c @@ -355,6 +355,7 @@ TEST_CASE test_case[] = { #endif TEST_DECL(test_ec_decode, NULL), TEST_DECL(test_ec_import, NULL), + TEST_DECL(test_ec_auto_derive_pubkey, NULL), TEST_DECL(test_ec_null_init, NULL), #endif #ifdef WP_HAVE_EC_P384 diff --git a/test/unit.h b/test/unit.h index 5579bf70..b0fdadfd 100644 --- a/test/unit.h +++ b/test/unit.h @@ -396,6 +396,7 @@ int test_ec_load_cert(void* data); int test_ec_decode(void* data); int test_ec_import(void* data); +int test_ec_auto_derive_pubkey(void* data); int test_ec_null_init(void* data); #endif /* WP_HAVE_ECC */ From 26176302cd741a1f6286a9b00c4a6e2bee1090ff Mon Sep 17 00:00:00 2001 From: Aidan Garske Date: Tue, 16 Dec 2025 09:30:31 -0800 Subject: [PATCH 2/5] Add comment on where failure happens --- src/wp_ecc_kmgmt.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/wp_ecc_kmgmt.c b/src/wp_ecc_kmgmt.c index e2a8e4d2..ca616222 100644 --- a/src/wp_ecc_kmgmt.c +++ b/src/wp_ecc_kmgmt.c @@ -1168,6 +1168,9 @@ static int wp_ecc_import_keypair(wp_Ecc* ecc, const OSSL_PARAM params[], ecc->key.type = ECC_PRIVATEKEY; ecc->hasPub = 1; } + /* If derivation fails, continue. + * The key is still valid for private key operations. + * We will fail later if public key is accessed. */ } } #endif /* OPENSSL_VERSION_NUMBER > 0x30600000L 3.6.0+ */ From bb12cc48e0dd9158af7868c3de858ba14ad795bd Mon Sep 17 00:00:00 2001 From: Aidan Garske Date: Tue, 16 Dec 2025 09:40:00 -0800 Subject: [PATCH 3/5] Basline with 3.6.0 --- .github/workflows/bind9.yml | 4 ++-- .github/workflows/cjose.yml | 4 ++-- .github/workflows/curl.yml | 4 ++-- .github/workflows/debian-package.yml | 4 ++-- .github/workflows/git-ssh-dr.yml | 4 ++-- .github/workflows/grpc.yml | 4 ++-- .github/workflows/hostap.yml | 4 ++-- .github/workflows/iperf.yml | 4 ++-- .github/workflows/krb5.yml | 4 ++-- .github/workflows/libcryptsetup.yml | 4 ++-- .github/workflows/libeac3.yml | 4 ++-- .github/workflows/libfido2.yml | 4 ++-- .github/workflows/libhashkit2.yml | 4 ++-- .github/workflows/libnice.yml | 4 ++-- .github/workflows/liboauth2.yml | 4 ++-- .github/workflows/librelp.yml | 4 ++-- .github/workflows/libssh2.yml | 4 ++-- .github/workflows/libtss2.yml | 2 +- .github/workflows/libwebsockets.yml | 4 ++-- .github/workflows/net-snmp.yml | 4 ++-- .github/workflows/nginx.yml | 4 ++-- .github/workflows/openldap.yml | 4 ++-- .github/workflows/opensc.yml | 4 ++-- .github/workflows/openssh.yml | 4 ++-- .github/workflows/openvpn.yml | 4 ++-- .github/workflows/pam-pkcs11.yml | 4 ++-- .github/workflows/ppp.yml | 4 ++-- .github/workflows/python3-ntp.yml | 4 ++-- .github/workflows/qt5network5.yml | 4 ++-- .github/workflows/rsync.yml | 4 ++-- .github/workflows/socat.yml | 4 ++-- .github/workflows/sscep.yml | 4 ++-- .github/workflows/stunnel.yml | 4 ++-- .github/workflows/systemd.yml | 4 ++-- .github/workflows/tcpdump.yml | 4 ++-- .github/workflows/tnftp.yml | 4 ++-- .github/workflows/tpm2-tools.yml | 4 ++-- .github/workflows/x11vnc.yml | 4 ++-- .github/workflows/xmlsec.yml | 4 ++-- 39 files changed, 77 insertions(+), 77 deletions(-) diff --git a/.github/workflows/bind9.yml b/.github/workflows/bind9.yml index 1057707c..7ee6f7c7 100644 --- a/.github/workflows/bind9.yml +++ b/.github/workflows/bind9.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: bind_ref: [ 'v9.18.28' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/cjose.yml b/.github/workflows/cjose.yml index 778a4225..94addcc5 100644 --- a/.github/workflows/cjose.yml +++ b/.github/workflows/cjose.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: # Dont test osp master since it might be unstable cjose_ref: [ 'v0.6.2.1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/curl.yml b/.github/workflows/curl.yml index 6c5ee31b..a54dbbaa 100644 --- a/.github/workflows/curl.yml +++ b/.github/workflows/curl.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: curl_ref: [ 'curl-8_4_0', 'curl-7_88_1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/debian-package.yml b/.github/workflows/debian-package.yml index 0a13051d..069cbd35 100644 --- a/.github/workflows/debian-package.yml +++ b/.github/workflows/debian-package.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true, false ] @@ -41,7 +41,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true, false ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] diff --git a/.github/workflows/git-ssh-dr.yml b/.github/workflows/git-ssh-dr.yml index c1cf5861..957f2367 100644 --- a/.github/workflows/git-ssh-dr.yml +++ b/.github/workflows/git-ssh-dr.yml @@ -21,7 +21,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -37,7 +37,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] key_type: [ 'rsa', 'ecdsa', 'ed25519', 'chacha20-poly1305' ] diff --git a/.github/workflows/grpc.yml b/.github/workflows/grpc.yml index d4033a8f..b178f918 100644 --- a/.github/workflows/grpc.yml +++ b/.github/workflows/grpc.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -48,7 +48,7 @@ jobs: test_core_security_ssl_credentials_test test_cpp_end2end_ssl_credentials_test h2_ssl_cert_test h2_ssl_session_reuse_test wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/hostap.yml b/.github/workflows/hostap.yml index 28907da2..aa89fa31 100644 --- a/.github/workflows/hostap.yml +++ b/.github/workflows/hostap.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: matrix: hostap_ref: [ 'main' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] diff --git a/.github/workflows/iperf.yml b/.github/workflows/iperf.yml index 73873421..1c4bd245 100644 --- a/.github/workflows/iperf.yml +++ b/.github/workflows/iperf.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: iperf_ref: [ '3.12' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/krb5.yml b/.github/workflows/krb5.yml index a2fb97b8..a662fc7e 100644 --- a/.github/workflows/krb5.yml +++ b/.github/workflows/krb5.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: krb5_ref: [ 'krb5-1.20.1-final' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libcryptsetup.yml b/.github/workflows/libcryptsetup.yml index f2d90a06..c6d2762c 100644 --- a/.github/workflows/libcryptsetup.yml +++ b/.github/workflows/libcryptsetup.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: cryptsetup_ref: [ 'v2.6.1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/libeac3.yml b/.github/workflows/libeac3.yml index 74e5067f..a6e6d6fb 100644 --- a/.github/workflows/libeac3.yml +++ b/.github/workflows/libeac3.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: openpace_ref: [ '1.1.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libfido2.yml b/.github/workflows/libfido2.yml index ac5e8fb7..4bb9938b 100644 --- a/.github/workflows/libfido2.yml +++ b/.github/workflows/libfido2.yml @@ -19,7 +19,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -35,7 +35,7 @@ jobs: matrix: libfido2_ref: [ '1.15.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libhashkit2.yml b/.github/workflows/libhashkit2.yml index f8ae74e3..74877f85 100644 --- a/.github/workflows/libhashkit2.yml +++ b/.github/workflows/libhashkit2.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: libhashkit2_ref: [ '1.1.4' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libnice.yml b/.github/workflows/libnice.yml index e1240c1a..e5e0896f 100644 --- a/.github/workflows/libnice.yml +++ b/.github/workflows/libnice.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: libnice_ref: [ '0.1.21' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/liboauth2.yml b/.github/workflows/liboauth2.yml index aa625668..3267a58c 100644 --- a/.github/workflows/liboauth2.yml +++ b/.github/workflows/liboauth2.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: liboauth2_ref: [ 'v1.4.5.4' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/librelp.yml b/.github/workflows/librelp.yml index 30e6a966..58f6a711 100644 --- a/.github/workflows/librelp.yml +++ b/.github/workflows/librelp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: # Dont test osp master since it might be unstable librelp_ref: [ 'v1.12.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libssh2.yml b/.github/workflows/libssh2.yml index be878832..e2136e6d 100644 --- a/.github/workflows/libssh2.yml +++ b/.github/workflows/libssh2.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: libssh2_ref: [ 'libssh2-1.10.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/libtss2.yml b/.github/workflows/libtss2.yml index aaf434b0..82d2877a 100644 --- a/.github/workflows/libtss2.yml +++ b/.github/workflows/libtss2.yml @@ -16,7 +16,7 @@ jobs: matrix: tpm2_tss_ref: [ '4.1.3'] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] env: diff --git a/.github/workflows/libwebsockets.yml b/.github/workflows/libwebsockets.yml index 4a722274..8fa25dcd 100644 --- a/.github/workflows/libwebsockets.yml +++ b/.github/workflows/libwebsockets.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: libwebsockets_ref: [ 'v4.3.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/net-snmp.yml b/.github/workflows/net-snmp.yml index 4e844cec..b6b56d0d 100644 --- a/.github/workflows/net-snmp.yml +++ b/.github/workflows/net-snmp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: net_snmp_ref: [ 'v5.9.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/nginx.yml b/.github/workflows/nginx.yml index da2b06c4..e5ecbcae 100644 --- a/.github/workflows/nginx.yml +++ b/.github/workflows/nginx.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: nginx_ref: [ 'release-1.27.4' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/openldap.yml b/.github/workflows/openldap.yml index c83206e2..4763ecce 100644 --- a/.github/workflows/openldap.yml +++ b/.github/workflows/openldap.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: openldap_ref: [ 'OPENLDAP_REL_ENG_2_6_7' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/opensc.yml b/.github/workflows/opensc.yml index f20e585c..277e015a 100644 --- a/.github/workflows/opensc.yml +++ b/.github/workflows/opensc.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: opensc_ref: [ '0.25.1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/openssh.yml b/.github/workflows/openssh.yml index 35580657..5bec6573 100644 --- a/.github/workflows/openssh.yml +++ b/.github/workflows/openssh.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -50,7 +50,7 @@ jobs: matrix: openssh_ref: [ 'V_10_0_P2', 'V_9_9_P1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'non-FIPS' ] # FIPS is not yet supported for OpenSSH force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/openvpn.yml b/.github/workflows/openvpn.yml index e8e46781..6788aa44 100644 --- a/.github/workflows/openvpn.yml +++ b/.github/workflows/openvpn.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: # Dont test master since it might be too unstable openvpn_ref: [ 'v2.6.12' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/pam-pkcs11.yml b/.github/workflows/pam-pkcs11.yml index e5a974a2..cd1bc72a 100644 --- a/.github/workflows/pam-pkcs11.yml +++ b/.github/workflows/pam-pkcs11.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: pam_pkcs11_ref: [ 'pam_pkcs11-0.6.12' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/ppp.yml b/.github/workflows/ppp.yml index 6319a01c..dc9df34b 100644 --- a/.github/workflows/ppp.yml +++ b/.github/workflows/ppp.yml @@ -21,7 +21,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: # and compatibility with newer versions of openssl ppp_ref: [ 'v2.5.2' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/python3-ntp.yml b/.github/workflows/python3-ntp.yml index a21e52e3..8f24e090 100644 --- a/.github/workflows/python3-ntp.yml +++ b/.github/workflows/python3-ntp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -44,7 +44,7 @@ jobs: matrix: python3-ntp_ref: [ 'NTPsec_1_2_2' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/qt5network5.yml b/.github/workflows/qt5network5.yml index 5213a887..82da82ed 100644 --- a/.github/workflows/qt5network5.yml +++ b/.github/workflows/qt5network5.yml @@ -20,7 +20,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -36,7 +36,7 @@ jobs: matrix: qt_ref: [ 'v5.15.8-lts-lgpl' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/rsync.yml b/.github/workflows/rsync.yml index 56c7411e..b12b08d4 100644 --- a/.github/workflows/rsync.yml +++ b/.github/workflows/rsync.yml @@ -20,7 +20,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: rsync_ref: [ 'v3.2.7' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/socat.yml b/.github/workflows/socat.yml index e623f932..bd066854 100644 --- a/.github/workflows/socat.yml +++ b/.github/workflows/socat.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: matrix: socat_ref: [ 'socat-1.8.0.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] diff --git a/.github/workflows/sscep.yml b/.github/workflows/sscep.yml index ef8cb447..f9b75151 100644 --- a/.github/workflows/sscep.yml +++ b/.github/workflows/sscep.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -43,7 +43,7 @@ jobs: matrix: sscep_ref: [ 'v0.10.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/stunnel.yml b/.github/workflows/stunnel.yml index d5e50089..a61901f3 100644 --- a/.github/workflows/stunnel.yml +++ b/.github/workflows/stunnel.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: stunnel_ref: [ 'stunnel-5.67' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/systemd.yml b/.github/workflows/systemd.yml index 60bd92b2..b32d030f 100644 --- a/.github/workflows/systemd.yml +++ b/.github/workflows/systemd.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -44,7 +44,7 @@ jobs: matrix: systemd_ref: [ 'v254' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/tcpdump.yml b/.github/workflows/tcpdump.yml index 04fa9fa8..d16aa7c0 100644 --- a/.github/workflows/tcpdump.yml +++ b/.github/workflows/tcpdump.yml @@ -20,7 +20,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -37,7 +37,7 @@ jobs: matrix: tcpdump_ref: [ 'tcpdump-4.99.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/tnftp.yml b/.github/workflows/tnftp.yml index 64146cb3..b0fd3e76 100644 --- a/.github/workflows/tnftp.yml +++ b/.github/workflows/tnftp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: tnftp_ref: [ 'tnftp-20210827' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/tpm2-tools.yml b/.github/workflows/tpm2-tools.yml index a041b7e0..ea3d10f3 100644 --- a/.github/workflows/tpm2-tools.yml +++ b/.github/workflows/tpm2-tools.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: tpm2_tools_ref: [ '5.7' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/x11vnc.yml b/.github/workflows/x11vnc.yml index a1853a29..3bccf755 100644 --- a/.github/workflows/x11vnc.yml +++ b/.github/workflows/x11vnc.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: x11vnc_ref: [ '0.9.17' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/xmlsec.yml b/.github/workflows/xmlsec.yml index 814b37c1..47a765ae 100644 --- a/.github/workflows/xmlsec.yml +++ b/.github/workflows/xmlsec.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: xmlsec_ref: [ 'xmlsec-1_2_37' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.5.4' ] + openssl_ref: [ 'openssl-3.6.0' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] From 825a0be0ec83322145a765027f61a6b3c4f167d0 Mon Sep 17 00:00:00 2001 From: Aidan Garske Date: Tue, 16 Dec 2025 10:27:55 -0800 Subject: [PATCH 4/5] Basline with master --- .github/workflows/bind9.yml | 4 ++-- .github/workflows/cjose.yml | 4 ++-- .github/workflows/curl.yml | 4 ++-- .github/workflows/debian-package.yml | 4 ++-- .github/workflows/git-ssh-dr.yml | 4 ++-- .github/workflows/grpc.yml | 4 ++-- .github/workflows/hostap.yml | 4 ++-- .github/workflows/iperf.yml | 4 ++-- .github/workflows/krb5.yml | 4 ++-- .github/workflows/libcryptsetup.yml | 4 ++-- .github/workflows/libeac3.yml | 4 ++-- .github/workflows/libfido2.yml | 4 ++-- .github/workflows/libhashkit2.yml | 4 ++-- .github/workflows/libnice.yml | 4 ++-- .github/workflows/liboauth2.yml | 4 ++-- .github/workflows/librelp.yml | 4 ++-- .github/workflows/libssh2.yml | 4 ++-- .github/workflows/libtss2.yml | 2 +- .github/workflows/libwebsockets.yml | 4 ++-- .github/workflows/net-snmp.yml | 4 ++-- .github/workflows/nginx.yml | 4 ++-- .github/workflows/openldap.yml | 4 ++-- .github/workflows/opensc.yml | 4 ++-- .github/workflows/openssh.yml | 4 ++-- .github/workflows/openvpn.yml | 4 ++-- .github/workflows/pam-pkcs11.yml | 4 ++-- .github/workflows/ppp.yml | 4 ++-- .github/workflows/python3-ntp.yml | 4 ++-- .github/workflows/qt5network5.yml | 4 ++-- .github/workflows/rsync.yml | 4 ++-- .github/workflows/socat.yml | 4 ++-- .github/workflows/sscep.yml | 4 ++-- .github/workflows/stunnel.yml | 4 ++-- .github/workflows/systemd.yml | 4 ++-- .github/workflows/tcpdump.yml | 4 ++-- .github/workflows/tnftp.yml | 4 ++-- .github/workflows/tpm2-tools.yml | 4 ++-- .github/workflows/x11vnc.yml | 4 ++-- .github/workflows/xmlsec.yml | 4 ++-- 39 files changed, 77 insertions(+), 77 deletions(-) diff --git a/.github/workflows/bind9.yml b/.github/workflows/bind9.yml index 7ee6f7c7..f8c223d5 100644 --- a/.github/workflows/bind9.yml +++ b/.github/workflows/bind9.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: bind_ref: [ 'v9.18.28' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/cjose.yml b/.github/workflows/cjose.yml index 94addcc5..3b1e0787 100644 --- a/.github/workflows/cjose.yml +++ b/.github/workflows/cjose.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: # Dont test osp master since it might be unstable cjose_ref: [ 'v0.6.2.1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/curl.yml b/.github/workflows/curl.yml index a54dbbaa..c4f6e7ac 100644 --- a/.github/workflows/curl.yml +++ b/.github/workflows/curl.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: curl_ref: [ 'curl-8_4_0', 'curl-7_88_1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/debian-package.yml b/.github/workflows/debian-package.yml index 069cbd35..b2347d66 100644 --- a/.github/workflows/debian-package.yml +++ b/.github/workflows/debian-package.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true, false ] @@ -41,7 +41,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true, false ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] diff --git a/.github/workflows/git-ssh-dr.yml b/.github/workflows/git-ssh-dr.yml index 957f2367..ce8daad8 100644 --- a/.github/workflows/git-ssh-dr.yml +++ b/.github/workflows/git-ssh-dr.yml @@ -21,7 +21,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -37,7 +37,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] key_type: [ 'rsa', 'ecdsa', 'ed25519', 'chacha20-poly1305' ] diff --git a/.github/workflows/grpc.yml b/.github/workflows/grpc.yml index b178f918..8d3c2f42 100644 --- a/.github/workflows/grpc.yml +++ b/.github/workflows/grpc.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -48,7 +48,7 @@ jobs: test_core_security_ssl_credentials_test test_cpp_end2end_ssl_credentials_test h2_ssl_cert_test h2_ssl_session_reuse_test wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/hostap.yml b/.github/workflows/hostap.yml index aa89fa31..0160d0fc 100644 --- a/.github/workflows/hostap.yml +++ b/.github/workflows/hostap.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: matrix: hostap_ref: [ 'main' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] diff --git a/.github/workflows/iperf.yml b/.github/workflows/iperf.yml index 1c4bd245..88c04356 100644 --- a/.github/workflows/iperf.yml +++ b/.github/workflows/iperf.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: iperf_ref: [ '3.12' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/krb5.yml b/.github/workflows/krb5.yml index a662fc7e..e26c4b32 100644 --- a/.github/workflows/krb5.yml +++ b/.github/workflows/krb5.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: krb5_ref: [ 'krb5-1.20.1-final' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libcryptsetup.yml b/.github/workflows/libcryptsetup.yml index c6d2762c..afd4ed2c 100644 --- a/.github/workflows/libcryptsetup.yml +++ b/.github/workflows/libcryptsetup.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: cryptsetup_ref: [ 'v2.6.1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/libeac3.yml b/.github/workflows/libeac3.yml index a6e6d6fb..cfb1db68 100644 --- a/.github/workflows/libeac3.yml +++ b/.github/workflows/libeac3.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: openpace_ref: [ '1.1.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libfido2.yml b/.github/workflows/libfido2.yml index 4bb9938b..45b93b0b 100644 --- a/.github/workflows/libfido2.yml +++ b/.github/workflows/libfido2.yml @@ -19,7 +19,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -35,7 +35,7 @@ jobs: matrix: libfido2_ref: [ '1.15.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libhashkit2.yml b/.github/workflows/libhashkit2.yml index 74877f85..ae50b0d4 100644 --- a/.github/workflows/libhashkit2.yml +++ b/.github/workflows/libhashkit2.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: libhashkit2_ref: [ '1.1.4' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libnice.yml b/.github/workflows/libnice.yml index e5e0896f..00ac05a1 100644 --- a/.github/workflows/libnice.yml +++ b/.github/workflows/libnice.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: libnice_ref: [ '0.1.21' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/liboauth2.yml b/.github/workflows/liboauth2.yml index 3267a58c..f26a7fc4 100644 --- a/.github/workflows/liboauth2.yml +++ b/.github/workflows/liboauth2.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: liboauth2_ref: [ 'v1.4.5.4' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/librelp.yml b/.github/workflows/librelp.yml index 58f6a711..4f0c9b59 100644 --- a/.github/workflows/librelp.yml +++ b/.github/workflows/librelp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: # Dont test osp master since it might be unstable librelp_ref: [ 'v1.12.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libssh2.yml b/.github/workflows/libssh2.yml index e2136e6d..56926cd5 100644 --- a/.github/workflows/libssh2.yml +++ b/.github/workflows/libssh2.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: libssh2_ref: [ 'libssh2-1.10.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/libtss2.yml b/.github/workflows/libtss2.yml index 82d2877a..342570c3 100644 --- a/.github/workflows/libtss2.yml +++ b/.github/workflows/libtss2.yml @@ -16,7 +16,7 @@ jobs: matrix: tpm2_tss_ref: [ '4.1.3'] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] env: diff --git a/.github/workflows/libwebsockets.yml b/.github/workflows/libwebsockets.yml index 8fa25dcd..029ea511 100644 --- a/.github/workflows/libwebsockets.yml +++ b/.github/workflows/libwebsockets.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: libwebsockets_ref: [ 'v4.3.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/net-snmp.yml b/.github/workflows/net-snmp.yml index b6b56d0d..d3d9cbcd 100644 --- a/.github/workflows/net-snmp.yml +++ b/.github/workflows/net-snmp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: net_snmp_ref: [ 'v5.9.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/nginx.yml b/.github/workflows/nginx.yml index e5ecbcae..8c035f6d 100644 --- a/.github/workflows/nginx.yml +++ b/.github/workflows/nginx.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: nginx_ref: [ 'release-1.27.4' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/openldap.yml b/.github/workflows/openldap.yml index 4763ecce..b774833a 100644 --- a/.github/workflows/openldap.yml +++ b/.github/workflows/openldap.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: openldap_ref: [ 'OPENLDAP_REL_ENG_2_6_7' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/opensc.yml b/.github/workflows/opensc.yml index 277e015a..44bb7e10 100644 --- a/.github/workflows/opensc.yml +++ b/.github/workflows/opensc.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: opensc_ref: [ '0.25.1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/openssh.yml b/.github/workflows/openssh.yml index 5bec6573..84bbe42c 100644 --- a/.github/workflows/openssh.yml +++ b/.github/workflows/openssh.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -50,7 +50,7 @@ jobs: matrix: openssh_ref: [ 'V_10_0_P2', 'V_9_9_P1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'non-FIPS' ] # FIPS is not yet supported for OpenSSH force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/openvpn.yml b/.github/workflows/openvpn.yml index 6788aa44..9d594461 100644 --- a/.github/workflows/openvpn.yml +++ b/.github/workflows/openvpn.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: # Dont test master since it might be too unstable openvpn_ref: [ 'v2.6.12' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/pam-pkcs11.yml b/.github/workflows/pam-pkcs11.yml index cd1bc72a..c0310b96 100644 --- a/.github/workflows/pam-pkcs11.yml +++ b/.github/workflows/pam-pkcs11.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: pam_pkcs11_ref: [ 'pam_pkcs11-0.6.12' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/ppp.yml b/.github/workflows/ppp.yml index dc9df34b..1fda5557 100644 --- a/.github/workflows/ppp.yml +++ b/.github/workflows/ppp.yml @@ -21,7 +21,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: # and compatibility with newer versions of openssl ppp_ref: [ 'v2.5.2' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/python3-ntp.yml b/.github/workflows/python3-ntp.yml index 8f24e090..b6d2478b 100644 --- a/.github/workflows/python3-ntp.yml +++ b/.github/workflows/python3-ntp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -44,7 +44,7 @@ jobs: matrix: python3-ntp_ref: [ 'NTPsec_1_2_2' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/qt5network5.yml b/.github/workflows/qt5network5.yml index 82da82ed..d400db16 100644 --- a/.github/workflows/qt5network5.yml +++ b/.github/workflows/qt5network5.yml @@ -20,7 +20,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -36,7 +36,7 @@ jobs: matrix: qt_ref: [ 'v5.15.8-lts-lgpl' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/rsync.yml b/.github/workflows/rsync.yml index b12b08d4..7c74cd20 100644 --- a/.github/workflows/rsync.yml +++ b/.github/workflows/rsync.yml @@ -20,7 +20,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: rsync_ref: [ 'v3.2.7' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/socat.yml b/.github/workflows/socat.yml index bd066854..80a5fb06 100644 --- a/.github/workflows/socat.yml +++ b/.github/workflows/socat.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: matrix: socat_ref: [ 'socat-1.8.0.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] diff --git a/.github/workflows/sscep.yml b/.github/workflows/sscep.yml index f9b75151..fe6542ab 100644 --- a/.github/workflows/sscep.yml +++ b/.github/workflows/sscep.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -43,7 +43,7 @@ jobs: matrix: sscep_ref: [ 'v0.10.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/stunnel.yml b/.github/workflows/stunnel.yml index a61901f3..7b01f79a 100644 --- a/.github/workflows/stunnel.yml +++ b/.github/workflows/stunnel.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: stunnel_ref: [ 'stunnel-5.67' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/systemd.yml b/.github/workflows/systemd.yml index b32d030f..6e46b80d 100644 --- a/.github/workflows/systemd.yml +++ b/.github/workflows/systemd.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -44,7 +44,7 @@ jobs: matrix: systemd_ref: [ 'v254' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/tcpdump.yml b/.github/workflows/tcpdump.yml index d16aa7c0..f2034784 100644 --- a/.github/workflows/tcpdump.yml +++ b/.github/workflows/tcpdump.yml @@ -20,7 +20,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -37,7 +37,7 @@ jobs: matrix: tcpdump_ref: [ 'tcpdump-4.99.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/tnftp.yml b/.github/workflows/tnftp.yml index b0fd3e76..321ae1d3 100644 --- a/.github/workflows/tnftp.yml +++ b/.github/workflows/tnftp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: tnftp_ref: [ 'tnftp-20210827' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/tpm2-tools.yml b/.github/workflows/tpm2-tools.yml index ea3d10f3..e1d93f5a 100644 --- a/.github/workflows/tpm2-tools.yml +++ b/.github/workflows/tpm2-tools.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: tpm2_tools_ref: [ '5.7' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/x11vnc.yml b/.github/workflows/x11vnc.yml index 3bccf755..dd1d3bb3 100644 --- a/.github/workflows/x11vnc.yml +++ b/.github/workflows/x11vnc.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: x11vnc_ref: [ '0.9.17' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/xmlsec.yml b/.github/workflows/xmlsec.yml index 47a765ae..374ed9e4 100644 --- a/.github/workflows/xmlsec.yml +++ b/.github/workflows/xmlsec.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: xmlsec_ref: [ 'xmlsec-1_2_37' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'openssl-3.6.0' ] + openssl_ref: [ 'master' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] From a0aa332cc6d93660519f51088a8119d94690b7d2 Mon Sep 17 00:00:00 2001 From: Aidan Garske Date: Tue, 16 Dec 2025 12:43:10 -0800 Subject: [PATCH 5/5] Add back openssl 3.5.4 --- .github/workflows/bind9.yml | 4 ++-- .github/workflows/cjose.yml | 4 ++-- .github/workflows/curl.yml | 4 ++-- .github/workflows/debian-package.yml | 4 ++-- .github/workflows/git-ssh-dr.yml | 4 ++-- .github/workflows/grpc.yml | 4 ++-- .github/workflows/hostap.yml | 4 ++-- .github/workflows/iperf.yml | 4 ++-- .github/workflows/krb5.yml | 4 ++-- .github/workflows/libcryptsetup.yml | 4 ++-- .github/workflows/libeac3.yml | 4 ++-- .github/workflows/libfido2.yml | 4 ++-- .github/workflows/libhashkit2.yml | 4 ++-- .github/workflows/libnice.yml | 4 ++-- .github/workflows/liboauth2.yml | 4 ++-- .github/workflows/librelp.yml | 4 ++-- .github/workflows/libssh2.yml | 4 ++-- .github/workflows/libtss2.yml | 2 +- .github/workflows/libwebsockets.yml | 4 ++-- .github/workflows/net-snmp.yml | 4 ++-- .github/workflows/nginx.yml | 4 ++-- .github/workflows/openldap.yml | 4 ++-- .github/workflows/opensc.yml | 4 ++-- .github/workflows/openssh.yml | 4 ++-- .github/workflows/openvpn.yml | 4 ++-- .github/workflows/pam-pkcs11.yml | 4 ++-- .github/workflows/ppp.yml | 4 ++-- .github/workflows/python3-ntp.yml | 4 ++-- .github/workflows/qt5network5.yml | 4 ++-- .github/workflows/rsync.yml | 4 ++-- .github/workflows/socat.yml | 4 ++-- .github/workflows/sscep.yml | 4 ++-- .github/workflows/stunnel.yml | 4 ++-- .github/workflows/systemd.yml | 4 ++-- .github/workflows/tcpdump.yml | 4 ++-- .github/workflows/tnftp.yml | 4 ++-- .github/workflows/tpm2-tools.yml | 4 ++-- .github/workflows/x11vnc.yml | 4 ++-- .github/workflows/xmlsec.yml | 4 ++-- 39 files changed, 77 insertions(+), 77 deletions(-) diff --git a/.github/workflows/bind9.yml b/.github/workflows/bind9.yml index f8c223d5..1057707c 100644 --- a/.github/workflows/bind9.yml +++ b/.github/workflows/bind9.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: bind_ref: [ 'v9.18.28' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/cjose.yml b/.github/workflows/cjose.yml index 3b1e0787..778a4225 100644 --- a/.github/workflows/cjose.yml +++ b/.github/workflows/cjose.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: # Dont test osp master since it might be unstable cjose_ref: [ 'v0.6.2.1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/curl.yml b/.github/workflows/curl.yml index c4f6e7ac..6c5ee31b 100644 --- a/.github/workflows/curl.yml +++ b/.github/workflows/curl.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: curl_ref: [ 'curl-8_4_0', 'curl-7_88_1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/debian-package.yml b/.github/workflows/debian-package.yml index b2347d66..0a13051d 100644 --- a/.github/workflows/debian-package.yml +++ b/.github/workflows/debian-package.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true, false ] @@ -41,7 +41,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true, false ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] diff --git a/.github/workflows/git-ssh-dr.yml b/.github/workflows/git-ssh-dr.yml index ce8daad8..c1cf5861 100644 --- a/.github/workflows/git-ssh-dr.yml +++ b/.github/workflows/git-ssh-dr.yml @@ -21,7 +21,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -37,7 +37,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] key_type: [ 'rsa', 'ecdsa', 'ed25519', 'chacha20-poly1305' ] diff --git a/.github/workflows/grpc.yml b/.github/workflows/grpc.yml index 8d3c2f42..d4033a8f 100644 --- a/.github/workflows/grpc.yml +++ b/.github/workflows/grpc.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -48,7 +48,7 @@ jobs: test_core_security_ssl_credentials_test test_cpp_end2end_ssl_credentials_test h2_ssl_cert_test h2_ssl_session_reuse_test wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/hostap.yml b/.github/workflows/hostap.yml index 0160d0fc..28907da2 100644 --- a/.github/workflows/hostap.yml +++ b/.github/workflows/hostap.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: matrix: hostap_ref: [ 'main' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] diff --git a/.github/workflows/iperf.yml b/.github/workflows/iperf.yml index 88c04356..73873421 100644 --- a/.github/workflows/iperf.yml +++ b/.github/workflows/iperf.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: iperf_ref: [ '3.12' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/krb5.yml b/.github/workflows/krb5.yml index e26c4b32..a2fb97b8 100644 --- a/.github/workflows/krb5.yml +++ b/.github/workflows/krb5.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: krb5_ref: [ 'krb5-1.20.1-final' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libcryptsetup.yml b/.github/workflows/libcryptsetup.yml index afd4ed2c..f2d90a06 100644 --- a/.github/workflows/libcryptsetup.yml +++ b/.github/workflows/libcryptsetup.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: cryptsetup_ref: [ 'v2.6.1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/libeac3.yml b/.github/workflows/libeac3.yml index cfb1db68..74e5067f 100644 --- a/.github/workflows/libeac3.yml +++ b/.github/workflows/libeac3.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: openpace_ref: [ '1.1.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libfido2.yml b/.github/workflows/libfido2.yml index 45b93b0b..ac5e8fb7 100644 --- a/.github/workflows/libfido2.yml +++ b/.github/workflows/libfido2.yml @@ -19,7 +19,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -35,7 +35,7 @@ jobs: matrix: libfido2_ref: [ '1.15.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libhashkit2.yml b/.github/workflows/libhashkit2.yml index ae50b0d4..f8ae74e3 100644 --- a/.github/workflows/libhashkit2.yml +++ b/.github/workflows/libhashkit2.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: libhashkit2_ref: [ '1.1.4' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libnice.yml b/.github/workflows/libnice.yml index 00ac05a1..e1240c1a 100644 --- a/.github/workflows/libnice.yml +++ b/.github/workflows/libnice.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: libnice_ref: [ '0.1.21' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/liboauth2.yml b/.github/workflows/liboauth2.yml index f26a7fc4..aa625668 100644 --- a/.github/workflows/liboauth2.yml +++ b/.github/workflows/liboauth2.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: liboauth2_ref: [ 'v1.4.5.4' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/librelp.yml b/.github/workflows/librelp.yml index 4f0c9b59..30e6a966 100644 --- a/.github/workflows/librelp.yml +++ b/.github/workflows/librelp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: # Dont test osp master since it might be unstable librelp_ref: [ 'v1.12.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/libssh2.yml b/.github/workflows/libssh2.yml index 56926cd5..be878832 100644 --- a/.github/workflows/libssh2.yml +++ b/.github/workflows/libssh2.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: libssh2_ref: [ 'libssh2-1.10.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/libtss2.yml b/.github/workflows/libtss2.yml index 342570c3..aaf434b0 100644 --- a/.github/workflows/libtss2.yml +++ b/.github/workflows/libtss2.yml @@ -16,7 +16,7 @@ jobs: matrix: tpm2_tss_ref: [ '4.1.3'] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] env: diff --git a/.github/workflows/libwebsockets.yml b/.github/workflows/libwebsockets.yml index 029ea511..4a722274 100644 --- a/.github/workflows/libwebsockets.yml +++ b/.github/workflows/libwebsockets.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: libwebsockets_ref: [ 'v4.3.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/net-snmp.yml b/.github/workflows/net-snmp.yml index d3d9cbcd..4e844cec 100644 --- a/.github/workflows/net-snmp.yml +++ b/.github/workflows/net-snmp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: net_snmp_ref: [ 'v5.9.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/nginx.yml b/.github/workflows/nginx.yml index 8c035f6d..da2b06c4 100644 --- a/.github/workflows/nginx.yml +++ b/.github/workflows/nginx.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: nginx_ref: [ 'release-1.27.4' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/openldap.yml b/.github/workflows/openldap.yml index b774833a..c83206e2 100644 --- a/.github/workflows/openldap.yml +++ b/.github/workflows/openldap.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: openldap_ref: [ 'OPENLDAP_REL_ENG_2_6_7' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/opensc.yml b/.github/workflows/opensc.yml index 44bb7e10..f20e585c 100644 --- a/.github/workflows/opensc.yml +++ b/.github/workflows/opensc.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: opensc_ref: [ '0.25.1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/openssh.yml b/.github/workflows/openssh.yml index 84bbe42c..35580657 100644 --- a/.github/workflows/openssh.yml +++ b/.github/workflows/openssh.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -50,7 +50,7 @@ jobs: matrix: openssh_ref: [ 'V_10_0_P2', 'V_9_9_P1' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'non-FIPS' ] # FIPS is not yet supported for OpenSSH force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/openvpn.yml b/.github/workflows/openvpn.yml index 9d594461..e8e46781 100644 --- a/.github/workflows/openvpn.yml +++ b/.github/workflows/openvpn.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: # Dont test master since it might be too unstable openvpn_ref: [ 'v2.6.12' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/pam-pkcs11.yml b/.github/workflows/pam-pkcs11.yml index c0310b96..e5a974a2 100644 --- a/.github/workflows/pam-pkcs11.yml +++ b/.github/workflows/pam-pkcs11.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: pam_pkcs11_ref: [ 'pam_pkcs11-0.6.12' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/ppp.yml b/.github/workflows/ppp.yml index 1fda5557..6319a01c 100644 --- a/.github/workflows/ppp.yml +++ b/.github/workflows/ppp.yml @@ -21,7 +21,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: # and compatibility with newer versions of openssl ppp_ref: [ 'v2.5.2' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/python3-ntp.yml b/.github/workflows/python3-ntp.yml index b6d2478b..a21e52e3 100644 --- a/.github/workflows/python3-ntp.yml +++ b/.github/workflows/python3-ntp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -44,7 +44,7 @@ jobs: matrix: python3-ntp_ref: [ 'NTPsec_1_2_2' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/qt5network5.yml b/.github/workflows/qt5network5.yml index d400db16..5213a887 100644 --- a/.github/workflows/qt5network5.yml +++ b/.github/workflows/qt5network5.yml @@ -20,7 +20,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -36,7 +36,7 @@ jobs: matrix: qt_ref: [ 'v5.15.8-lts-lgpl' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/rsync.yml b/.github/workflows/rsync.yml index 7c74cd20..56c7411e 100644 --- a/.github/workflows/rsync.yml +++ b/.github/workflows/rsync.yml @@ -20,7 +20,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: rsync_ref: [ 'v3.2.7' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/socat.yml b/.github/workflows/socat.yml index 80a5fb06..e623f932 100644 --- a/.github/workflows/socat.yml +++ b/.github/workflows/socat.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -42,7 +42,7 @@ jobs: matrix: socat_ref: [ 'socat-1.8.0.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] diff --git a/.github/workflows/sscep.yml b/.github/workflows/sscep.yml index fe6542ab..ef8cb447 100644 --- a/.github/workflows/sscep.yml +++ b/.github/workflows/sscep.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -43,7 +43,7 @@ jobs: matrix: sscep_ref: [ 'v0.10.0' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/stunnel.yml b/.github/workflows/stunnel.yml index 7b01f79a..d5e50089 100644 --- a/.github/workflows/stunnel.yml +++ b/.github/workflows/stunnel.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: stunnel_ref: [ 'stunnel-5.67' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/systemd.yml b/.github/workflows/systemd.yml index 6e46b80d..60bd92b2 100644 --- a/.github/workflows/systemd.yml +++ b/.github/workflows/systemd.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -44,7 +44,7 @@ jobs: matrix: systemd_ref: [ 'v254' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/tcpdump.yml b/.github/workflows/tcpdump.yml index f2034784..04fa9fa8 100644 --- a/.github/workflows/tcpdump.yml +++ b/.github/workflows/tcpdump.yml @@ -20,7 +20,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -37,7 +37,7 @@ jobs: matrix: tcpdump_ref: [ 'tcpdump-4.99.3' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/tnftp.yml b/.github/workflows/tnftp.yml index 321ae1d3..64146cb3 100644 --- a/.github/workflows/tnftp.yml +++ b/.github/workflows/tnftp.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -40,7 +40,7 @@ jobs: matrix: tnftp_ref: [ 'tnftp-20210827' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: ['WOLFPROV_FORCE_FAIL=1', ''] replace_default: [ true ] diff --git a/.github/workflows/tpm2-tools.yml b/.github/workflows/tpm2-tools.yml index e1d93f5a..a041b7e0 100644 --- a/.github/workflows/tpm2-tools.yml +++ b/.github/workflows/tpm2-tools.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: tpm2_tools_ref: [ '5.7' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/x11vnc.yml b/.github/workflows/x11vnc.yml index dd1d3bb3..a1853a29 100644 --- a/.github/workflows/x11vnc.yml +++ b/.github/workflows/x11vnc.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -39,7 +39,7 @@ jobs: matrix: x11vnc_ref: [ '0.9.17' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ] diff --git a/.github/workflows/xmlsec.yml b/.github/workflows/xmlsec.yml index 374ed9e4..814b37c1 100644 --- a/.github/workflows/xmlsec.yml +++ b/.github/workflows/xmlsec.yml @@ -23,7 +23,7 @@ jobs: strategy: matrix: wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] replace_default: [ true ] @@ -41,7 +41,7 @@ jobs: matrix: xmlsec_ref: [ 'xmlsec-1_2_37' ] wolfssl_ref: [ 'v5.8.4-stable' ] - openssl_ref: [ 'master' ] + openssl_ref: [ 'openssl-3.5.4' ] fips_ref: [ 'FIPS', 'non-FIPS' ] force_fail: [ 'WOLFPROV_FORCE_FAIL=1', '' ] replace_default: [ true ]