Add CI that builds and runs every example#598

Open

aidangarske wants to merge 111 commits into

wolfSSL:masterfrom

aidangarske:ci-matrix

Commits on Jul 22, 2026

Regenerate the CRL that expired in September 2025
aidangarske
committed
Refresh the expired certificates embedded in certloadverifybuffer
aidangarske
committed
Return 0 from tls servers that returned a wolfSSL_write byte count
aidangarske
committed
Send a client certificate from client-tls and client-tls13-resume
aidangarske
committed
Return 0 from certverify instead of WOLFSSL_SUCCESS
aidangarske
committed
Give the XTS demo key two different halves
aidangarske
committed
Exit success after ml_dsa prints its parameter table
aidangarske
committed
Report failure from the custom io file client and server
aidangarske
committed
Latch failures across every ecc-params curve lookup
aidangarske
committed
Ignore SIGPIPE in the btle fifo transport
aidangarske
committed
Fix the dtls rw-threads certificate paths
aidangarske
committed
Make runall.sh fail when an example fails
aidangarske
committed
Make openssl-verify.sh actually verify and actually fail
aidangarske
committed
Raise the generate_ssl.sh common name length limit
aidangarske
committed
Port the PQ examples to the current wolfSSL API
aidangarske
committed
Return 0 from csr_w_ed25519_example and rsa-public-decrypt-app
aidangarske
committed
Build the x509_acert openssl example against the right headers
aidangarske
committed
Give the examples Makefiles a consistent wolfSSL prefix
aidangarske
committed
Fix the double free and NULL derefs in the custom io cleanup paths
aidangarske
committed
Stop forcing the ESP32 examples to include a developer private config
aidangarske
committed
Add the missing WiFi Kconfig to the DTLS13 station examples
aidangarske
committed
Use XSTRLCPY in client-dtls13 since wolfSSL has no XSTRCPY
aidangarske
committed
Make the DTLS13 example ctx static so it stops colliding with libnet80211
aidangarske
committed
Set SO_REUSEADDR on the tls servers that lacked it
aidangarske
committed
Give puf the wolfSSL sources and stop building the IDF 4.4 only ENC28J60 examples
aidangarske
committed
Set SO_REUSEADDR on server-tcp as well
aidangarske
committed
Exit the can-bus client on EOF and give it real input in CI
aidangarske
committed
Re-arm the select timeout each pass in the nonblocking dtls server
aidangarske
committed
Keep the shared memory BIOs alive until both sides are done
aidangarske
committed
Port the ebpf tracers to the libbpf 1.0 perf_buffer__new signature
aidangarske
committed
Clone wolfSSL before make builds its graph so uefi-static builds from a clean tree
aidangarske
committed
Raise wolfcryptjni compileSdk to 32 for the BigInteger API its submodule uses
aidangarske
committed
Link wolfentropy.o and keep wc_port socket helpers out of the UEFI build
aidangarske
committed
Track the wolfSSL dilithium.c to wc_mldsa.c rename and drop a stale java import
aidangarske
committed
Move uefi-library to the wc_MlDsa API after the wolfSSL dilithium rename
aidangarske
committed
Declare the launcher activity exported, required from API 31
aidangarske
committed
Configure wolfSSL before make in the fullstack setup script
aidangarske
committed
Track the wolfSSL io.c to wolfio.c rename in the ndk sample
aidangarske
committed
Keep glibc headers out of the freestanding uefi-library build
aidangarske
committed
Track the wolfSSL mlkem.h rename and give RT1060 the SDK name it selects on
aidangarske
committed
Track the wolfIP struct ll rename and pin wolfIP to its v1.0 release
aidangarske
committed
Use getaddrinfo in the ndk sample since bionic does not declare gethostbyname
aidangarske
committed
Cross compile RT1060 with arm-none-eabi and document the SDK value the Makefile matches
aidangarske
committed
Enable wolfIP HTTP so its httpd.h actually declares the API the example calls
aidangarske
committed
Define HAVE_NETDB_H so wolfio.c includes the header its getaddrinfo path needs
aidangarske
committed
Link pkcs12.o, which RT1060 enables by default and wolfcrypt test calls
aidangarske
committed
Port the ENC28J60 examples to the ESP-IDF 5.x ethernet API
aidangarske
committed
Compile dtls.c in the ndk sample, which enables WOLFSSL_DTLS
aidangarske
committed
Define the PHY identifier registers the removed IDF header supplied
aidangarske
committed
Compile kdf.c in the ndk sample for the TLS PRF
aidangarske
committed
Give RT1060 a current_time so the benchmark stops needing clock_gettime
aidangarske
committed
Port the ENC28J60 PHY to the IDF 5.x autonego_ctrl vtable
aidangarske
committed
Remove the ENC28J60 server's duplicate driver copy that main already builds
aidangarske
committed
Return the DTLS server to accept on close_notify so a resume is heard
aidangarske
committed
Run the C# pq client/server pair under mono
aidangarske
committed
Define WOLFSSL_CERT_REQ so the ndk-gradle app links wolfssljni's X509_REQ calls
aidangarske
committed
Refresh the expired client ECC DER certificate
aidangarske
committed
Add CI that builds and runs every example against wolfSSL master and stable
aidangarske
committed
Sign OCSP staples with a responder intermediate1 actually delegated
aidangarske
committed
Report a failing PKCS#11 example instead of always exiting 0
aidangarske
committed
Link the PSA library the README's PSA_LIB_PATH names
aidangarske
committed
Widen the mynewt pointer prints so they build on a 64 bit native BSP
aidangarske
committed
Test RSA under UEFI with a 2048 bit key so it clears wolfSSL's minimum
aidangarske
committed
Left pad the ECDSA r and s so a leading zero cannot shift the signature
aidangarske
committed
Document the smime and indef flags the pkcs7 examples need
aidangarske
committed
Fail ecc-verify when the signature does not verify
aidangarske
committed
Fail ecc-sign when a round produces an invalid signature
aidangarske
committed
Fail aesgcm-file-encrypt when its sanity test does not pass
aidangarske
committed
Check that ML-KEM derives the same shared secret on both sides
aidangarske
committed
Fail ecdh_gen_secret when the two sides derive different secrets
aidangarske
committed
Return the DH key agreement error instead of always exiting 0
aidangarske
committed
Retry the fullstack HTTPS probe so a slow sim start does not fail it
aidangarske
committed
Confirm the custom-io file transfer succeeded so CI can assert it
aidangarske
committed
Print a success line from the silent file-encrypt and ecc-export examples
aidangarske
committed
Add device-sims job running ATECC608 STSAFE and TROPIC01 sim wolfcrypt tests
aidangarske
committed
Extend device-sims to STM32 and PIC32MZ for the full sim fleet
aidangarske
committed
Mount wolfSSL for the STM32 and PIC32MZ sim wolfcrypt runs
aidangarske
committed
Accept the zero success return from wolfSSL_CTX_set_max_early_data
aidangarske
committed
Read the earlydata reply so the client processes the session ticket before resuming
aidangarske
committed
Read the earlydata reply in the DTLS client so it processes the session ticket
aidangarske
committed
Run the tls13 and dtls13 earlydata pairs now that the clients process the ticket
aidangarske
committed
Let expect_fail clear on refs that carry the fix via a fixed_on marker
aidangarske
committed
Retry the PSA TLS 1.3 handshake so an intermittent ECC reject does not fail CI
aidangarske
committed
Retry network fetches across CI so a transient blip does not fail a job
aidangarske
committed
Normalize do_ecc and do_25519 exit codes like do_448 so an error is never masked to 0
aidangarske
committed
Build and run the merged-in hsm dtls_client example in CI via a dedicated hsm.yml job
aidangarske
committed
Add a make check target to each applicable example
aidangarske
committed
Run only the example and lint smoke set on draft PRs
aidangarske
committed
Only run a per-target workflow when its own example dir changes
aidangarske
committed
Assert the real se050 wolfcrypt result instead of an early sub-test line
aidangarske
committed
Size the RSA 2048 key export buffers so the UEFI test does not fail on BUFFER_E
aidangarske
committed
Call the always-present MLDSA context API from the UEFI driver
aidangarske
committed
Cross uefi-static and uefi-library with both wolfSSL refs in the matrix
aidangarske
committed
Give each tpm matrix leg a ref-unique results file and artifact
aidangarske
committed
Add a codespell spellcheck pass to the lint job
aidangarske
committed
Run push CI on master only so a PR branch does not double-trigger
aidangarske
committed
Select valgrind by caller_run_id since event_name is the caller under workflow_call
aidangarske
committed
Make example check targets catch real failures with pipefail exit checks and inputs
aidangarske
committed
Wire the harness to run make check for mode check examples starting with ecc
aidangarske
committed
Migrate the single-entry exec examples to mode check and fold their inputs into the check targets
aidangarske
committed
Fix four make check assertions that misfired under pipefail
aidangarske
committed
Give the tpm manifest entry a run step so it asserts output
aidangarske
committed
Skip uefi-static in the lint make -n loop so it does not clone
aidangarske
committed
Assert the actual verify result in the pkcs7 and rsa-nb checks
aidangarske
committed

Commits on Jul 23, 2026

Return nonzero from pkcs12-create-example on a failed create so the check is not a false pass
aidangarske
committed
Return nonzero from rsa-kg on any key generate or write failure
aidangarske
committed
Assert the static memory checks by exit code instead of a pipefail grep that BSD make lacks
aidangarske
committed
Run pkcs7 signedData stream through make check so it asserts the real verify result
aidangarske
committed
Check DER certificates and CRLs in the expiry canary too
aidangarske
committed
Feed the wolfHSM client its stdin so run_client actually exchanges data
aidangarske
committed
Assert every make check by exit code and captured output instead of a pipefail grep so they hold under BSD make
aidangarske
committed

Uh oh!

Commits

Commits on Jul 22, 2026

Commits on Jul 23, 2026