From patchwork Mon Aug 22 08:41:46 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Arne Schwabe X-Patchwork-Id: 2712 Return-Path: Delivered-To: patchwork@openvpn.net Delivered-To: patchwork@openvpn.net Received: from director11.mail.ord1d.rsapps.net ([172.27.255.54]) by backend30.mail.ord1d.rsapps.net with LMTP id iMaREC3OA2PpRgAAIUCqbw (envelope-from ) for ; Mon, 22 Aug 2022 14:42:53 -0400 Received: from proxy5.mail.iad3a.rsapps.net ([172.27.255.54]) by director11.mail.ord1d.rsapps.net with LMTP id QJ2FEC3OA2NBaQAAvGGmqA (envelope-from ) for ; Mon, 22 Aug 2022 14:42:53 -0400 Received: from smtp10.gate.iad3a ([172.27.255.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) by proxy5.mail.iad3a.rsapps.net with LMTPS id qGKvCS3OA2OyfQAAhn5joQ (envelope-from ) for ; Mon, 22 Aug 2022 14:42:53 -0400 X-Spam-Threshold: 95 X-Spam-Score: 0 X-Spam-Flag: NO X-Virus-Scanned: OK X-Orig-To: openvpnslackdevel@openvpn.net X-Originating-Ip: [216.105.38.7] Authentication-Results: smtp10.gate.iad3a.rsapps.net; iprev=pass policy.iprev="216.105.38.7"; spf=pass smtp.mailfrom="openvpn-devel-bounces@lists.sourceforge.net" smtp.helo="lists.sourceforge.net"; dkim=fail (signature verification failed) header.d=sourceforge.net; dkim=fail (signature verification failed) header.d=sf.net; dmarc=none (p=nil; dis=none) header.from=rfc2549.org X-Suspicious-Flag: YES X-Classification-ID: 3a57f0e0-224a-11ed-99c0-525400a8203f-1-1 Received: from [216.105.38.7] ([216.105.38.7:37978] helo=lists.sourceforge.net) by smtp10.gate.iad3a.rsapps.net (envelope-from ) (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384) id 7B/FE-15056-C2EC3036; Mon, 22 Aug 2022 14:42:52 -0400 Received: from [127.0.0.1] (helo=sfs-ml-1.v29.lw.sourceforge.com) by sfs-ml-1.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1oQCN6-0001k9-MT; Mon, 22 Aug 2022 18:42:00 +0000 Received: from [172.30.20.202] (helo=mx.sourceforge.net) by sfs-ml-1.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1oQCN4-0001k3-Sq for openvpn-devel@lists.sourceforge.net; Mon, 22 Aug 2022 18:41:58 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:Message-Id: Date:Subject:To:From:Sender:Reply-To:Cc:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=zroSPtIDBmYVRoijigGdhQTe8PchmbeYkqC0Vs/M3qs=; b=PIRoG8GgEjyprAWbbzckcnocdw /tmliKhs4UND4bPuRmHI3qoBromhCOKZmk1Jl8DpiQAcfbp6q9IIAixDdrAdfVNrBKM3KMa8MFX+i x7pCmGrX1ZLNyHNJiLDixS9LabTuKYIWiUOQkr8lEltHDSUdi1vZSSIaBS0C8FyXisQE=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:Message-Id:Date:Subject:To:From: Sender:Reply-To:Cc:Content-Type:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To: References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:List-Post: List-Owner:List-Archive; bh=zroSPtIDBmYVRoijigGdhQTe8PchmbeYkqC0Vs/M3qs=; b=g +q24lwvE5097VTvZPCDhHdByrWyfdJXglfa/28cfeLSwsZVH6cBSqS04xDZQjjOyuCSFgG/J8kTeD 6GwWsu/Djv+6XzOtpRsBkx/4T6V7j6Hna1+zvOy98qB5ApcBBTZAglM9dN46d3hWlcxqcoDi8ThCp 9Xyq1Q6N9kRcxHoo=; Received: from mail.blinkt.de ([192.26.174.232]) by sfi-mx-1.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1oQCN1-00DQji-5o for openvpn-devel@lists.sourceforge.net; Mon, 22 Aug 2022 18:41:58 +0000 Received: from kamera.blinkt.de ([2001:638:502:390:20c:29ff:fec8:535c]) by mail.blinkt.de with smtp (Exim 4.95 (FreeBSD)) (envelope-from ) id 1oQCMt-000IIS-R2 for openvpn-devel@lists.sourceforge.net; Mon, 22 Aug 2022 20:41:47 +0200 Received: (nullmailer pid 281188 invoked by uid 10006); Mon, 22 Aug 2022 18:41:47 -0000 From: Arne Schwabe To: openvpn-devel@lists.sourceforge.net Date: Mon, 22 Aug 2022 20:41:46 +0200 Message-Id: <20220822184147.281142-1-arne@rfc2549.org> X-Mailer: git-send-email 2.25.1 MIME-Version: 1.0 X-Spam-Report: Spam detection software, running on the system "util-spamd-1.v13.lw.sourceforge.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Also we don't officially support it, it is nice to know when we break it. Signed-off-by: Arne Schwabe --- .github/workflows/build.yaml | 63 ++++++++++++++++++++++++++++++++++++ 1 file changed, 63 insertions(+) Content analysis details: (0.3 points, 6.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record X-Headers-End: 1oQCN1-00DQji-5o Subject: [Openvpn-devel] [PATCH 1/2] Github Actions: Add libreSSL actions X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox Also we don't officially support it, it is nice to know when we break it. Signed-off-by: Arne Schwabe Acked-by: Gert Doering --- .github/workflows/build.yaml | 63 ++++++++++++++++++++++++++++++++++++ 1 file changed, 63 insertions(+) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index f42469af6..dfa3953f0 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -366,3 +366,66 @@ jobs: token: ${{ secrets.OPENVPN_BUILD_REPO_DISPATCH }} repository: openvpn/openvpn-build event-type: openvpn-commit + + libressl: + strategy: + fail-fast: false + matrix: + os: [ubuntu-22.04] + ssllib: [libressl] + build: [ normal, asan ] + configureflags: ["--with-openssl-engine=no"] + include: + - build: asan + cflags: "-fsanitize=address -fno-optimize-sibling-calls -fsanitize-address-use-after-scope -fno-omit-frame-pointer -g -O1" + ldflags: -fsanitize=address + cc: clang + - build: normal + cflags: "-O2 -g" + ldflags: "" + cc: gcc + + name: "${{matrix.cc}} ${{matrix.build}} - ${{matrix.os}} - ${{matrix.ssllib}}" + runs-on: ${{matrix.os}} + env: + CFLAGS: ${{ matrix.cflags }} + LDFLAGS: ${{ matrix.ldflags }} + CC: ${{matrix.cc}} + + steps: + - name: Install dependencies + run: sudo apt update && sudo apt install -y liblzo2-dev libpam0g-dev liblz4-dev linux-libc-dev man2html clang libcmocka-dev python3-docutils libtool automake autoconf pkg-config libcap-ng-dev + - name: "libressl: checkout" + uses: actions/checkout@v3 + with: + path: libressl + repository: libressl-portable/portable + ref: v3.5.3 + - name: "libressl: autogen.sh" + run: ./autogen.sh + working-directory: libressl + - name: "libressl: autoconf" + run: autoreconf -fvi + working-directory: libressl + - name: "libressl: configure" + run: ./configure --enable-openvpn + working-directory: libressl + - name: "libressl: make all" + run: make -j3 + working-directory: libressl + - name: "libressl: make install" + run: sudo make install + working-directory: libressl + - name: "ldconfig" + run: sudo ldconfig + - name: Checkout OpenVPN + uses: actions/checkout@v3 + - name: autoconf + run: autoreconf -fvi + - name: configure + run: ./configure --with-crypto-library=openssl ${{matrix.configureflags}} + - name: make all + run: make -j3 + - name: make check + run: make check + From patchwork Mon Aug 22 08:41:47 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Arne Schwabe X-Patchwork-Id: 2713 Return-Path: Delivered-To: patchwork@openvpn.net Delivered-To: patchwork@openvpn.net Received: from director9.mail.ord1d.rsapps.net ([172.27.255.7]) by backend30.mail.ord1d.rsapps.net with LMTP id yDgmOGDOA2MTSAAAIUCqbw (envelope-from ) for ; Mon, 22 Aug 2022 14:43:44 -0400 Received: from proxy1.mail.iad3a.rsapps.net ([172.27.255.7]) by director9.mail.ord1d.rsapps.net with LMTP id iAMAOGDOA2PccgAAalYnBA (envelope-from ) for ; Mon, 22 Aug 2022 14:43:44 -0400 Received: from smtp19.gate.iad3a ([172.27.255.7]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) by proxy1.mail.iad3a.rsapps.net with LMTPS id mLBhMmDOA2O+UwAA8TVjwQ (envelope-from ) for ; Mon, 22 Aug 2022 14:43:44 -0400 X-Spam-Threshold: 95 X-Spam-Score: 0 X-Spam-Flag: NO X-Virus-Scanned: OK X-Orig-To: openvpnslackdevel@openvpn.net X-Originating-Ip: [216.105.38.7] Authentication-Results: smtp19.gate.iad3a.rsapps.net; iprev=pass policy.iprev="216.105.38.7"; spf=pass smtp.mailfrom="openvpn-devel-bounces@lists.sourceforge.net" smtp.helo="lists.sourceforge.net"; dkim=fail (signature verification failed) header.d=sourceforge.net; dkim=fail (signature verification failed) header.d=sf.net; dmarc=none (p=nil; dis=none) header.from=rfc2549.org X-Suspicious-Flag: YES X-Classification-ID: 5921ee0e-224a-11ed-8267-5254005d39f2-1-1 Received: from [216.105.38.7] ([216.105.38.7:51640] helo=lists.sourceforge.net) by smtp19.gate.iad3a.rsapps.net (envelope-from ) (ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384) id 32/88-16082-06EC3036; Mon, 22 Aug 2022 14:43:44 -0400 Received: from [127.0.0.1] (helo=sfs-ml-2.v29.lw.sourceforge.com) by sfs-ml-2.v29.lw.sourceforge.com with esmtp (Exim 4.95) (envelope-from ) id 1oQCNu-0006sm-23; Mon, 22 Aug 2022 18:42:50 +0000 Received: from [172.30.20.202] (helo=mx.sourceforge.net) by sfs-ml-2.v29.lw.sourceforge.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1oQCNG-0006ry-Bw for openvpn-devel@lists.sourceforge.net; Mon, 22 Aug 2022 18:42:16 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sourceforge.net; s=x; h=Content-Transfer-Encoding:MIME-Version:References: In-Reply-To:Message-Id:Date:Subject:To:From:Sender:Reply-To:Cc:Content-Type: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=dfdy6kh5j1OWgrQBntmEXI03Qp15SS/3oZmjjKp1B+w=; b=iY/+lujK/D8uC2m//87D4J2rw3 nEraifGhQpBbFZQygfjX0WF3ISpNd4US/MgDBSCU1M3Pss16MIofmv1IVL7KJVNz3VRFfGNpchpH0 j0fXld4QgV0ipi7TH3/bo0LEfKY4ZQUub9RsuVumd6STSiX8EiKbcDu0a8gFZUE/t82Y=; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=sf.net; s=x ; h=Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-Id: Date:Subject:To:From:Sender:Reply-To:Cc:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=dfdy6kh5j1OWgrQBntmEXI03Qp15SS/3oZmjjKp1B+w=; b=ZXlL97bDSJjKbn8JQ3AaF8gkMI C7RPf9V9mx/obQbtOpqOCXRO69gSXGzRatNuRUFX4s1owjI4ZPhLup2v/3bdk5AsHXLrOUriswRQn hCOPIJDbrxY2758HgWImOrsiTxS2eEuUbYElsWRMd08QLhJlHGGn/LMDELU7M1JTYlu0=; Received: from mail.blinkt.de ([192.26.174.232]) by sfi-mx-2.v28.lw.sourceforge.com with esmtps (TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.95) id 1oQCN5-0001iv-Ll for openvpn-devel@lists.sourceforge.net; Mon, 22 Aug 2022 18:42:07 +0000 Received: from kamera.blinkt.de ([2001:638:502:390:20c:29ff:fec8:535c]) by mail.blinkt.de with smtp (Exim 4.95 (FreeBSD)) (envelope-from ) id 1oQCMt-000IIU-Rl for openvpn-devel@lists.sourceforge.net; Mon, 22 Aug 2022 20:41:47 +0200 Received: (nullmailer pid 281192 invoked by uid 10006); Mon, 22 Aug 2022 18:41:47 -0000 From: Arne Schwabe To: openvpn-devel@lists.sourceforge.net Date: Mon, 22 Aug 2022 20:41:47 +0200 Message-Id: <20220822184147.281142-2-arne@rfc2549.org> X-Mailer: git-send-email 2.25.1 In-Reply-To: <20220822184147.281142-1-arne@rfc2549.org> References: <20220822184147.281142-1-arne@rfc2549.org> MIME-Version: 1.0 X-Spam-Report: Spam detection software, running on the system "util-spamd-1.v13.lw.sourceforge.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Signed-off-by: Arne Schwabe --- .github/workflows/build.yaml | 24 +++++++++++++++++------- 1 file changed, 17 insertions(+), 7 deletions(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index dfa3953f0..6c2c3ef3e 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -261,12 +261,12 @@ j [...] Content analysis details: (0.3 points, 6.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 SPF_NONE SPF: sender does not publish an SPF Record 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record X-Headers-End: 1oQCN5-0001iv-Ll Subject: [Openvpn-devel] [PATCH 2/2] Include libressl and macOS 12 to macOS github actions X-BeenThere: openvpn-devel@lists.sourceforge.net X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: openvpn-devel-bounces@lists.sourceforge.net X-getmail-retrieved-from-mailbox: Inbox Signed-off-by: Arne Schwabe Acked-by: Gert Doering --- .github/workflows/build.yaml | 24 +++++++++++++++++------- 1 file changed, 17 insertions(+), 7 deletions(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index dfa3953f0..6c2c3ef3e 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -261,12 +261,12 @@ jobs: run: make check macos: - runs-on: macos-latest strategy: fail-fast: false matrix: - ossl: [ 1.1, 3 ] + ssllib: [ openssl11, openssl3, libressl] build: [ normal, asan ] + os: [macos-11, macos-12] include: - build: asan cflags: "-fsanitize=address -fno-optimize-sibling-calls -fsanitize-address-use-after-scope -fno-omit-frame-pointer -g -O1" @@ -277,22 +277,32 @@ jobs: cflags: "-O2 -g" ldflags: "" configureflags: "" + - ssllib: openssl11 + libdir: openssl@1.1 + configuressllib: "" + - ssllib: openssl3 + libdir: openssl@3 + configuressllib: "" + - ssllib: libressl + libdir: libressl + configuressllib: "--with-openssl-engine=no" - name: "macOS - OpenSSL ${{matrix.ossl}} - ${{matrix.build}}" + runs-on: ${{matrix.os}} + name: "${{matrix.os}} - ${{matrix.libdir}} - ${{matrix.build}}" env: CFLAGS: ${{ matrix.cflags }} LDFLAGS: ${{ matrix.ldflags }} - OPENSSL_CFLAGS: -I/usr/local/opt/openssl@${{matrix.ossl}}/include - OPENSSL_LIBS: "-L/usr/local/opt/openssl@${{matrix.ossl}}/lib -lcrypto -lssl" + OPENSSL_CFLAGS: "-I/usr/local/opt/${{matrix.libdir}}/include" + OPENSSL_LIBS: "-L/usr/local/opt/${{matrix.libdir}}/lib -lcrypto -lssl" steps: - name: Install dependencies - run: brew install openssl@1.1 openssl@3 lzo lz4 man2html cmocka libtool automake autoconf + run: brew install openssl@1.1 openssl@3 lzo lz4 man2html cmocka libtool automake autoconf libressl - name: Checkout OpenVPN uses: actions/checkout@v3 - name: autoconf run: autoreconf -fvi - name: configure - run: ./configure ${{matrix.configureflags}} + run: ./configure ${{matrix.configureflags}} ${{matrix.configuressllib}} - name: make all run: make -j4 - name: make check