forked from rustls/rustls
-
Notifications
You must be signed in to change notification settings - Fork 0
162 lines (134 loc) · 5.06 KB
/
daily-tests.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
name: daily-tests
permissions:
contents: read
on:
workflow_dispatch:
schedule:
# We run these tests on a daily basis (at a time slightly offset from the
# top of the hour), as their runtime is either too long for the usual per-PR
# CI, or because they rely on external 3rd party services that can be flaky.
- cron: '15 18 * * *'
jobs:
connect-tests:
name: Connect Tests
runs-on: ${{ matrix.os }}
strategy:
matrix:
# test a bunch of toolchains on ubuntu
rust:
- stable
- beta
- nightly
os: [ubuntu-latest]
# but only stable on macos/windows (slower platforms)
include:
- os: macos-latest
rust: stable
- os: windows-latest
rust: stable
steps:
- name: Checkout sources
uses: actions/checkout@v4
with:
persist-credentials: false
- name: Install ${{ matrix.rust }} toolchain
uses: dtolnay/rust-toolchain@master
with:
toolchain: ${{ matrix.rust }}
- name: Install NASM for aws-lc-rs on Windows
if: runner.os == 'Windows'
uses: ilammy/setup-nasm@v1
- name: Install ninja-build tool for aws-lc-fips-sys on Windows
if: runner.os == 'Windows'
uses: seanmiddleditch/gha-setup-ninja@v5
- name: Build example programs
run: cargo build --locked -p rustls-examples
- name: Run connect tests
run: cargo test --locked -p rustls-connect-tests --manifest-path=connect-tests/Cargo.toml
env:
RUST_BACKTRACE: 1
example-tests:
name: Example Tests
runs-on: ${{ matrix.os }}
strategy:
matrix:
# test a bunch of toolchains on ubuntu
rust:
- stable
- beta
- nightly
os: [ubuntu-latest]
# but only stable on macos/windows (slower platforms)
include:
- os: macos-latest
rust: stable
- os: windows-latest
rust: stable
steps:
- name: Checkout sources
uses: actions/checkout@v4
with:
persist-credentials: false
- name: Install ${{ matrix.rust }} toolchain
uses: dtolnay/rust-toolchain@master
with:
toolchain: ${{ matrix.rust }}
- name: Install NASM for aws-lc-rs on Windows
if: runner.os == 'Windows'
uses: ilammy/setup-nasm@v1
- name: Install ninja-build tool for aws-lc-fips-sys on Windows
if: runner.os == 'Windows'
uses: seanmiddleditch/gha-setup-ninja@v5
- name: Check simple client
run: cargo run --locked -p rustls-examples --bin simpleclient
- name: Check limited client
run: cargo run --locked -p rustls-examples --bin limitedclient
- name: Check simple 0rtt client
run: cargo run --locked -p rustls-examples --bin simple_0rtt_client
- name: Check unbuffered client
run: cargo run --locked -p rustls-examples --bin unbuffered-client
- name: Check unbuffered tokio client
run: cargo run --locked -p rustls-examples --bin unbuffered-async-client
- name: Check unbuffered async-std client
run: cargo run --locked -p rustls-examples --bin unbuffered-async-client --features=async-std
# Test the server_acceptor binary builds - we invoke with --help since it
# will run a server process that doesn't exit when invoked with no args
- name: Check server acceptor
run: cargo run --locked -p rustls-examples --bin server_acceptor -- --help
- name: Check ech-client (research.cloudflare.com)
run: >
cargo run --locked -p rustls-examples --bin ech-client -- research.cloudflare.com cloudflare.com --path /cdn-cgi/trace |
grep 'sni=encrypted'
- name: Check ech-client (defo.ie)
run: >
cargo run --locked -p rustls-examples --bin ech-client -- --host defo.ie defo.ie www.defo.ie |
grep 'SSL_ECH_STATUS: success'
- name: Check provider-example client
run: cargo run --locked -p rustls-provider-example --example client
- name: Check rustls-post-quantum client
run: cargo run --locked -p rustls-post-quantum --example client | grep 'kex=X25519Kyber768Draft00'
feature-powerset:
name: Feature Powerset
runs-on: ubuntu-latest
steps:
- name: Checkout sources
uses: actions/checkout@v4
with:
persist-credentials: false
- name: Install stable toolchain
uses: dtolnay/rust-toolchain@stable
- name: Install cargo hack
uses: taiki-e/install-action@cargo-hack
- name: Check feature powerset
run: >
cargo hack check
--package rustls
--feature-powerset
--no-dev-deps
--group-features aws_lc_rs,aws-lc-rs
--group-features fips,aws_lc_rs
--mutually-exclusive-features fips,ring
--mutually-exclusive-features custom_provider,aws_lc_rs
--mutually-exclusive-features custom_provider,ring
env:
RUSTFLAGS: --deny warnings