ci: run pkcs11-provider external test on Fedora

We want to be able to run pkcs11-provider external test with
kryoptic token that is currently only available on Fedora.
Therefore we have to separate the test from the external test
for oqs provider.

Signed-off-by: Ondrej Moris <omoris@redhat.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27602)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5381593cdf10668ca3c0c716d3b85d2f34879193..bd6715942d7f068d5de9edebdeaf11773459e254 100644 (file)
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -658,16 +658,12 @@ jobs:
         gdb < <(echo -e "file ./libcrypto.so.3\nquit") > ./results
         grep -q "Reading symbols from.*libcrypto\.so\.3\.debug" results
 
-  external-tests-providers:
+  external-tests-oqs-provider:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
       with:
         submodules: recursive
-    - name: package installs
-      run: |
-        sudo apt-get update
-        sudo apt-get -yq install meson pkg-config gnutls-bin libnss3-tools libnss3-dev libsofthsm2 opensc expect
     - name: config
       run: ./config --strict-warnings --banner=Configured --debug enable-external-tests && perl configdata.pm --dump
     - name: make
@@ -678,6 +674,21 @@ jobs:
         ./util/opensslwrap.sh version -c
     - name: test external oqs-provider
       run: make test TESTS="test_external_oqsprovider"
+
+  external-tests-pkcs11-provider:
+    runs-on: ubuntu-latest
+    container: fedora:rawhide
+    steps:
+    - name: package installs
+      run: |
+        dnf install -y kryoptic perl git meson opensc expect
+    - uses: actions/checkout@v4
+      with:
+        submodules: true  
+    - name: config
+      run: ./config --strict-warnings --banner=Configured --debug enable-external-tests && perl configdata.pm --dump
+    - name: make
+      run: make -s -j4
     - name: test external pkcs11-provider
       run: make test TESTS="test_external_pkcs11_provider" VERBOSE=1