travis: Run tests against wolfSSL

Check for wolfssl/options.h because if it isn't included, checking other
headers will trigger a warning about hardening the wolfSSL build, which
will cause the check to fail with -Werror.

If the file doesn't exist because user_settings.h is used, the check may
be skipped by configuring with `ac_cv_header_wolfssl_options_h=yes`.

diff --git a/.travis.yml b/.travis.yml
index 7e70df553e0b5f3537e46dcd6b67a9be07598b1a..3a62e2c157090fe47dfb10cf27747ec2d9c7a0fb 100644 (file)
--- a/.travis.yml
+++ b/.travis.yml
@@ -81,6 +81,8 @@ matrix:
     # the crypto plugins are build-tested with clang via "all" above
     - env: TEST=botan
     - env: TEST=botan LEAK_DETECTIVE=yes
+    - env: TEST=wolfssl
+    - env: TEST=wolfssl LEAK_DETECTIVE=yes
     - env: TEST=openssl
     - env: TEST=openssl LEAK_DETECTIVE=yes
     - env: TEST=openssl-1.0

diff --git a/configure.ac b/configure.ac
index 08e830652f02986ea0d4922df1e04c6dfd652cf2..9a1c5a30d2627a0dfb94914703b4b32f9785d04c 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -1142,7 +1142,7 @@ if test x$wolfssl = xtrue; then
        AC_CHECK_LIB([$wolfssl_lib],[wolfSSL_Init],[LIBS="$LIBS"],
                [AC_MSG_ERROR([wolfSSL lib$wolfssl_lib not found])],[$DLLIB])
        AC_SUBST(WOLFSSL_LIB, [-l$wolfssl_lib])
-       AC_CHECK_HEADER([wolfssl/ssl.h],,[AC_MSG_ERROR([wolfSSL header wolfssl/ssl.h not found!])])
+       AC_CHECK_HEADER([wolfssl/options.h],,[AC_MSG_ERROR([wolfSSL header wolfssl/options.h not found!])])
 fi
 
 if test x$gcrypt = xtrue; then

diff --git a/scripts/test.sh b/scripts/test.sh
index b958db1a0d1b0163b477978e1021f1a97684a24f..0f206b38193bd85c518b17661b2fdb9d9e6ff33d 100755 (executable)
--- a/scripts/test.sh
+++ b/scripts/test.sh
@@ -34,6 +34,33 @@ build_botan()
        cd -
 }
 
+build_wolfssl()
+{
+       WOLFSSL_REV=v4.0.0-stable
+       WOLFSSL_DIR=$TRAVIS_BUILD_DIR/../wolfssl
+
+       if test -d "$WOLFSSL_DIR"; then
+               return
+       fi
+
+       echo "$ build_wolfssl()"
+
+       WOLFSSL_CFLAGS="-DWOLFSSL_PUBLIC_MP -DWOLFSSL_DES_ECB"
+       WOLFSSL_CONFIG="--enable-keygen --enable-rsapss --enable-aesccm
+                                       --enable-aesctr --enable-des3 --enable-camellia
+                                       --enable-curve25519 --enable-ed25519"
+
+       git clone https://github.com/wolfSSL/wolfssl.git $WOLFSSL_DIR &&
+       cd $WOLFSSL_DIR &&
+       git checkout -qf $WOLFSSL_REV &&
+       ./autogen.sh &&
+       ./configure C_EXTRA_FLAGS="$WOLFSSL_CFLAGS" $WOLFSSL_CONFIG &&
+       make -j4 >/dev/null &&
+       sudo make install >/dev/null &&
+       sudo ldconfig || exit $?
+       cd -
+}
+
 build_tss2()
 {
        TSS2_REV=2.1.0
@@ -135,6 +162,14 @@ botan)
                build_botan
        fi
        ;;
+wolfssl)
+       CONFIG="--disable-defaults --enable-pki --enable-wolfssl --enable-pem"
+       # build with custom options to enable all the features the plugin supports
+       DEPS=""
+       if test "$1" = "deps"; then
+               build_wolfssl
+       fi
+       ;;
 printf-builtin)
        CONFIG="--with-printf-hooks=builtin"
        ;;
@@ -161,6 +196,7 @@ all|coverage|sonarcloud)
        PYDEPS="pytest"
        if test "$1" = "deps"; then
                build_botan
+               build_wolfssl
                build_tss2
        fi
        use_custom_openssl $1