]> git.ipfire.org Git - thirdparty/openvpn.git/commitdiff
Show version and double check we use the right TLS library in Github Actions
authorArne Schwabe <arne@rfc2549.org>
Fri, 13 Mar 2026 17:53:16 +0000 (18:53 +0100)
committerGert Doering <gert@greenie.muc.de>
Fri, 13 Mar 2026 22:26:50 +0000 (23:26 +0100)
We recently discovered that the AWS-LC builds in Github Actions were
actually using OpenSSL. This will now cause an error if something like
this happens in the future again.

Change-Id: Ia929c949cceaabe21a2937ad3217052aec4b2b4c
Signed-off-by: Arne Schwabe <arne-openvpn@rfc2549.org>
Acked-by: Frank Lichtenheld <frank@lichtenheld.com>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1566
Message-Id: <20260313175324.12121-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg36115.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
(cherry picked from commit a659605d8c14be58d9b556bc82ea8660b4fe4192)

.github/workflows/build.yaml

index 2a2616bbdc7e049cc9d656a1953f2ce9f2350334..dd8e4721f2f650cb5e45f49c8173fdf3a1ae6784 100644 (file)
@@ -363,6 +363,10 @@ jobs:
         run: ./configure --with-crypto-library=openssl ${{matrix.configureflags}} --enable-werror
       - name: make all
         run: make -j3
+      - name: Ensure the build uses LibreSSL
+        run: |
+          ./src/openvpn/openvpn --version
+          ./src/openvpn/openvpn --version | grep -q "library versions: LibreSSL"
       - name: configure checks
         run: echo 'RUN_SUDO="sudo -E"' >tests/t_server_null.rc
       - name: make check
@@ -422,6 +426,10 @@ jobs:
         run: ./configure --with-crypto-library=mbedtls --enable-werror
       - name: make all
         run: make -j3
+      - name: Ensure the build uses mbed TLS 4.x
+        run: |
+          ./src/openvpn/openvpn --version
+          ./src/openvpn/openvpn --version | grep -q "library versions: mbed TLS 4."
       - name: configure checks
         run: echo 'RUN_SUDO="sudo -E"' >tests/t_server_null.rc
       - name: make check
@@ -486,6 +494,10 @@ jobs:
           ./configure --with-crypto-library=openssl
       - name: make all
         run: make -j3
+      - name: Ensure the build uses AWS-LC
+        run: |
+          ./src/openvpn/openvpn --version
+          ./src/openvpn/openvpn --version | grep -q "library versions: AWS-LC"
       - name: configure checks
         run: echo 'RUN_SUDO="sudo -E"' >tests/t_server_null.rc
       - name: make check