From patchwork Tue Mar 19 15:44:56 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Frank Lichtenheld X-Patchwork-Id: 3659 Return-Path: Delivered-To: patchwork@openvpn.net Received: by 2002:a05:7000:f20a:b0:55c:c090:46f0 with SMTP id sk10csp1981275mab; Tue, 19 Mar 2024 08:45:30 -0700 (PDT) X-Forwarded-Encrypted: i=2; AJvYcCWCH5fLViM5CsMQiESygsgRDss8R+72j7/KEMHlXRjRxgVauzPpt1N1CO7kpeTgZ4lMYBT51XaCfLPUmkjF2KLhYfHlGts= X-Google-Smtp-Source: AGHT+IGrf8bC4E5aSa41p1ogb7BSISgFbdWf2wwvUITzBPfQgd4W/j5uNckfIklZIcoOgkFgSnLo X-Received: by 2002:a05:6359:4c86:b0:17e:bbaf:4060 with SMTP id kk6-20020a0563594c8600b0017ebbaf4060mr2691678rwc.2.1710863130254; Tue, 19 Mar 2024 08:45:30 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1710863130; cv=none; d=google.com; s=arc-20160816; b=1LPGxrZPWGbV+3Beu2fatsNpsAPJXOrRwQa/YbNoUr1c+zODIeh3vGlZ51l3t9N671 gOkrpAd82niA57JWFscfrzTdKaas6p56vyLGoyx3nM6p8h/LsFyc3yQfUK+2xUlrQyaW QP25IZgYlPbhp0+ugOIDAjiMIbGfvp66W6zFzATLvi5SfWJ8RUqAfjNGJYpvdOQmqgVq w+FVlEsyv0349Ro91KWvD4a0oGU1iEVnoEtufWIiaomh1VkAhSbdj06GgC0DJpD5CoYV NAY9Cw176EQ+YkP82jgpMaRqbzYyrfnWUW8q80R4jgZsn31P5T69TKHUO4s/Z2W+B1XK 5FEA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=errors-to:content-transfer-encoding:cc:list-subscribe:list-help :list-post:list-archive:list-unsubscribe:list-id:precedence:subject :mime-version:references:in-reply-to:message-id:date:to:from :dkim-signature:dkim-signature:dkim-signature; bh=B638Nd37hFs36gVfpeHOe8vUqninMHuu5m5HLnHm5YU=; fh=CfxSpwd5kfiMJoL3kcov7PTxVKT7pGe/79idnx9XlBs=; b=w4G2+tedIBp2vRMli7SQIUcHEqFu5s+Ki9HP1aHb+QSnJZQm8UxIYmbADznRIX/p+7 5pBNZQMHO3y/YC63NpFzGBp42qV9k0e9Yb8l3/jVZzDEBZaU0FnwLoGt3stZEPnIHztx V/7G+RdX0+JgIGs6EjRxB7lZn5pyr3Iw9hS3nbqxL2wjLHfaQecPn3FVYpYYWRlFOa43 ugMa7fn0/TQp8KjGKNSmMp3trrw5F8ytnQlIVQ9NK6UjWsnpSnjL0d2XHfLZLIj/w9D4 CtXlnMHpoDDsEd5X2XRPbkU8HVpI8+G6LcGVDJ1xs8bUTgD06wGIq85Dg8+l+Crqmg4L TNqA==; dara=google.com ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=UPs6gWSk; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=boM4NYDI; dkim=neutral (body hash did not verify) header.i=@lichtenheld.com header.s=MBO0001 header.b=eir+borA; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net Received: from lists.sourceforge.net (lists.sourceforge.net. [216.105.38.7]) by mx.google.com with ESMTPS id d11-20020a63ed0b000000b005e428bf5de1si10243301pgi.749.2024.03.19.08.45.30 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 19 Mar 2024 08:45:30 -0700 (PDT) Received-SPF: pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) client-ip=216.105.38.7; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@sourceforge.net header.s=x header.b=UPs6gWSk; dkim=neutral (body hash did not verify) header.i=@sf.net header.s=x header.b=boM4NYDI; dkim=neutral (body hash did not verify) header.i=@lichtenheld.com header.s=MBO0001 header.b=eir+borA; spf=pass (google.com: domain of openvpn-devel-bounces@lists.sourceforge.net designates 216.105.38.7 as permitted sender) smtp.mailfrom=openvpn-devel-bounces@lists.sourceforge.net Received: from [127.0.0.1] (helo=sfs-ml-4.v29.lw.sourceforge.com) by sfs-ml-4.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1rmbeI-00038Y-Mg; Tue, 19 Mar 2024 15:45:10 +0000 Received: from [172.30.20.202] (helo=mx.sourceforge.net) by sfs-ml-4.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1rmbeG-00038O-FS for openvpn-devel@lists.sourceforge.net; Tue, 19 Mar 2024 15:45:09 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:References: In-Reply-To:Message-Id:Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=8XU2NA4701BWk6QG8PKy6/y5Sc872b4Eha5TouZ6IrM=; b=UPs6gWSkHX5AofH5MgX5tHKx9l u4Pf74EivQXf3jlfngcLkKg3RZ/EFXD2p/EK5OGy98r6DoyeKCdnOMjgsU4O0gF4m2vg9izMrAxI4 mPwYMLVGcIndo2ROYCGNGsdJQXtFAYSni4WBuHAP6wR/bbUZ2vg9FX0et60bdYxlOai8=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-Id: Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=8XU2NA4701BWk6QG8PKy6/y5Sc872b4Eha5TouZ6IrM=; b=boM4NYDIoFOV6Bhi23mKwnCVr3 8So5jltvnCJ21UpEMr03RVHQTyfWKZS71Vxtya39jKN5sMS4aWL8n9X3UGRhhLMZ4CDlyuScMBQDO CNEgFfcmnhRKILSrgMFAF0IL2MX2qtMnvw335XJ/9pHXFtIDeLnWMbvc0VlZUu/gAV4I=; Received: from mout-p-101.mailbox.org ([80.241.56.151]) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1rmbe6-0006iq-Ia for openvpn-devel@lists.sourceforge.net; Tue, 19 Mar 2024 15:45:08 +0000 Received: from smtp1.mailbox.org (smtp1.mailbox.org [10.196.197.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mout-p-101.mailbox.org (Postfix) with ESMTPS id 4TzbdP5DTFz9sWB; Tue, 19 Mar 2024 16:44:57 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lichtenheld.com; s=MBO0001; t=1710863097; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=8XU2NA4701BWk6QG8PKy6/y5Sc872b4Eha5TouZ6IrM=; b=eir+borANUAd7gDpfrXlEt08XAlJsN/wn8/cnB8cQ0RRbnikqZUlSspxP/O5A1rIm1IeOa HrCFMKmi1Q1kPnOtPbahu4QBi5wAZe/mFEgMiUpXQ0fyREjAEY52maAqO6n/jTW8dkKE/W qLvEpcipe/bysoQZL436gMnQU0ikKBZLo5nVARq+RzMfxZJYn0tdZO8c3Cyhn14v1q4CfA HKfXyx/qBJx+N5b418RmzAXF3OViR8TJuxxUCzaqdhq2CCWMRctgLPmgKOrFv9+J+6Iz/w 3VfczWjK9+cvLR9NAITUaCsX1qb5RyRu/n32y6U3I8qK1QvMQiPg9W5jMgjBJA== From: Frank Lichtenheld To: openvpn-devel@lists.sourceforge.net Date: Tue, 19 Mar 2024 16:44:56 +0100 Message-Id: <20240319154456.2967716-1-frank@lichtenheld.com> In-Reply-To: References: MIME-Version: 1.0 X-Spam-Score: -0.9 (/) X-Spam-Report: Spam detection software, running on the system "util-spamd-1.v13.lw.sourceforge.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: - Update to Node 20 versions of actions to avoid warnings - Update to current vcpkg - Update mbedTLS and LibreSSL to latest releases Change-Id: I1ad6a0b1323ce0872f4a3299c5a9f18a982e0126 Signed-off-by: Frank Lichtenheld Acked-by: Arne Schwabe --- Content analysis details: (-0.9 points, 6.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/, low trust [80.241.56.151 listed in list.dnswl.org] 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.0 T_SCC_BODY_TEXT_LINE No description available. X-Headers-End: 1rmbe6-0006iq-Ia Subject: [Openvpn-devel] [PATCH v1] GHA: general update March 2024 X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Arne Schwabe Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox X-GMAIL-THRID: =?utf-8?q?1793970017878218195?= X-GMAIL-MSGID: =?utf-8?q?1793970017878218195?= - Update to Node 20 versions of actions to avoid warnings - Update to current vcpkg - Update mbedTLS and LibreSSL to latest releases Change-Id: I1ad6a0b1323ce0872f4a3299c5a9f18a982e0126 Signed-off-by: Frank Lichtenheld Acked-by: Arne Schwabe --- This change was reviewed on Gerrit and approved by at least one developer. I request to merge it to master. Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/544 This mail reflects revision 1 of this Change. Acked-by according to Gerrit (reflected above): Arne Schwabe diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index bc937e5..f771f5a 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -13,7 +13,7 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y uncrustify - name: Checkout OpenVPN - uses: actions/checkout@v3 + uses: actions/checkout@v4 with: path: openvpn - name: Show uncrustify version @@ -27,7 +27,7 @@ - name: Show changes on standard output run: git diff working-directory: openvpn - - uses: actions/upload-artifact@v3 + - uses: actions/upload-artifact@v4 with: name: uncrustify-changes.patch path: 'openvpn/uncrustify-changes.patch' @@ -49,12 +49,12 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y mingw-w64 unzip cmake ninja-build build-essential wget python3-docutils man2html-base - name: Checkout OpenVPN - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Restore from cache and install vcpkg uses: lukka/run-vcpkg@v11 with: - vcpkgGitCommitId: '1ba9a2591f15af5900f2ce2b3e2bf31771e3ac48' + vcpkgGitCommitId: 8d3649ba34aab36914ddd897958599aa0a91b08e vcpkgJsonGlob: '**/mingw/vcpkg.json' - name: Run CMake with vcpkg.json manifest @@ -64,7 +64,7 @@ buildPreset: mingw-${{ matrix.arch }} buildPresetAdditionalArgs: "['--config Debug']" - - uses: actions/upload-artifact@v3 + - uses: actions/upload-artifact@v4 with: name: openvpn-mingw-${{ matrix.arch }} path: | @@ -72,7 +72,7 @@ ${{ github.workspace }}/out/build/mingw/${{ matrix.arch }}/Debug/*.dll !${{ github.workspace }}/out/build/mingw/${{ matrix.arch }}/Debug/test_*.exe - - uses: actions/upload-artifact@v3 + - uses: actions/upload-artifact@v4 with: name: openvpn-mingw-${{ matrix.arch }}-tests path: | @@ -91,9 +91,9 @@ name: "mingw unittest ${{ matrix.test }} - ${{ matrix.arch }} - OSSL" steps: - name: Checkout OpenVPN - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Retrieve mingw unittest - uses: actions/download-artifact@v3 + uses: actions/download-artifact@v4 with: name: openvpn-mingw-${{ matrix.arch }}-tests path: unittests @@ -159,7 +159,7 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y liblzo2-dev libpam0g-dev liblz4-dev libcap-ng-dev libnl-genl-3-dev linux-libc-dev man2html libcmocka-dev python3-docutils libtool automake autoconf ${SSLPKG} ${PKCS11PKG} - name: Checkout OpenVPN - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: autoconf run: autoreconf -fvi - name: configure @@ -186,7 +186,7 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y liblzo2-dev libpam0g-dev liblz4-dev libcap-ng-dev libnl-genl-3-dev linux-libc-dev man2html clang libcmocka-dev python3-docutils libtool automake autoconf libmbedtls-dev - name: Checkout OpenVPN - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: autoconf run: autoreconf -fvi - name: configure @@ -235,7 +235,7 @@ - name: Install dependencies run: brew install openssl@1.1 openssl@3 lzo lz4 man2html cmocka libtool automake autoconf libressl - name: Checkout OpenVPN - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: autoconf run: autoreconf -fvi - name: configure @@ -257,7 +257,7 @@ runs-on: windows-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: lukka/get-cmake@latest - name: Install rst2html @@ -266,7 +266,7 @@ - name: Restore artifacts, or setup vcpkg (do not install any package) uses: lukka/run-vcpkg@v11 with: - vcpkgGitCommitId: '1ba9a2591f15af5900f2ce2b3e2bf31771e3ac48' + vcpkgGitCommitId: 8d3649ba34aab36914ddd897958599aa0a91b08e vcpkgJsonGlob: '**/windows/vcpkg.json' - name: Run CMake with vcpkg.json manifest (NO TESTS) @@ -285,7 +285,7 @@ testPreset: win-${{ matrix.arch }}-release testPresetAdditionalArgs: "['--output-on-failure']" - - uses: actions/upload-artifact@v3 + - uses: actions/upload-artifact@v4 with: name: openvpn-msvc-${{ matrix.arch }} path: | @@ -325,11 +325,11 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y liblzo2-dev libpam0g-dev liblz4-dev linux-libc-dev man2html clang libcmocka-dev python3-docutils libtool automake autoconf pkg-config libcap-ng-dev libnl-genl-3-dev - name: "libressl: checkout" - uses: actions/checkout@v3 + uses: actions/checkout@v4 with: path: libressl repository: libressl/portable - ref: v3.8.2 + ref: v3.8.3 - name: "libressl: autogen.sh" run: ./autogen.sh working-directory: libressl @@ -345,7 +345,7 @@ - name: "ldconfig" run: sudo ldconfig - name: Checkout OpenVPN - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: autoconf run: autoreconf -fvi - name: configure @@ -384,11 +384,11 @@ - name: Install dependencies run: sudo apt update && sudo apt install -y liblzo2-dev libpam0g-dev liblz4-dev linux-libc-dev man2html clang libcmocka-dev python3-docutils python3-jinja2 python3-jsonschema libtool automake autoconf pkg-config libcap-ng-dev libnl-genl-3-dev - name: "mbedtls: checkout" - uses: actions/checkout@v3 + uses: actions/checkout@v4 with: path: mbedtls repository: Mbed-TLS/mbedtls - ref: v3.5.0 + ref: v3.5.2 - name: "mbedtls: make no_test" run: make -j3 no_test SHARED=1 working-directory: mbedtls @@ -396,7 +396,7 @@ run: sudo make install DESTDIR=/usr working-directory: mbedtls - name: Checkout OpenVPN - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: autoconf run: autoreconf -fvi - name: configure diff --git a/.github/workflows/coverity-scan.yml b/.github/workflows/coverity-scan.yml index c107933..e289746 100644 --- a/.github/workflows/coverity-scan.yml +++ b/.github/workflows/coverity-scan.yml @@ -10,7 +10,7 @@ steps: - name: Check submission cache id: check_submit - uses: actions/cache/restore@v3 + uses: actions/cache/restore@v4 with: path: | cov-int @@ -22,7 +22,7 @@ - name: Checkout OpenVPN if: steps.check_submit.outputs.cache-hit != 'true' - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Download Coverity Build Tool if: steps.check_submit.outputs.cache-hit != 'true' @@ -62,7 +62,7 @@ - name: Cache submission if: steps.check_submit.outputs.cache-hit != 'true' - uses: actions/cache/save@v3 + uses: actions/cache/save@v4 with: path: | cov-int