curl/.github/workflows/ngtcp2-wolfssl.yml

# Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
#
# SPDX-License-Identifier: curl

name: ngtcp2 wolfSSL

on:
  push:
    branches:
    - master
    - '*/ci'
    paths-ignore:
    - '**/*.md'
    - '**/CMakeLists.txt'
    - '.azure-pipelines.yml'
    - '.circleci/**'
    - '.cirrus.yml'
    - 'appveyor.yml'
    - 'CMake/**'
    - 'packages/**'
    - 'plan9/**'
    - 'projects/**'
    - 'winbuild/**'
  pull_request:
    branches:
    - master
    paths-ignore:
    - '**/*.md'
    - '**/CMakeLists.txt'
    - '.azure-pipelines.yml'
    - '.circleci/**'
    - '.cirrus.yml'
    - 'appveyor.yml'
    - 'CMake/**'
    - 'packages/**'
    - 'plan9/**'
    - 'projects/**'
    - 'winbuild/**'

concurrency:
  # Hardcoded workflow filename as workflow name above is just Linux again
  group: ngtcp2-wolfssl-${{ github.event.pull_request.number || github.sha }}
  cancel-in-progress: true

permissions: {}

env:
  MAKEFLAGS: -j 3

jobs:
  autotools:
    name: ${{ matrix.build.name }}
    runs-on: 'ubuntu-latest'
    timeout-minutes: 60
    strategy:
      fail-fast: false
      matrix:
        build:
        - name: wolfssl
          install: >-
            libpsl-dev libbrotli-dev libzstd-dev zlib1g-dev libev-dev libc-ares-dev            
          configure: >-
            PKG_CONFIG_PATH="$HOME/all/lib/pkgconfig" LDFLAGS="-Wl,-rpath,$HOME/all/lib"
            --with-ngtcp2=$HOME/all --enable-warnings --enable-werror --enable-debug
            --with-test-nghttpx="$HOME/all/bin/nghttpx"            
          ngtcp2-configure: >-
            --prefix=$HOME/all PKG_CONFIG_PATH="$HOME/all/lib/pkgconfig" --enable-lib-only            
          wolfssl-configure: >-
            --enable-all --enable-quic            

    steps:
    - run: |
        sudo apt-get update
        sudo apt-get install libtool autoconf automake pkg-config stunnel4 ${{ matrix.build.install }}
        sudo apt-get install apache2 apache2-dev        
      name: 'install prereqs'

    - run: |
        WOLFSSL_VER=v5.6.3-stable
        git clone --quiet --depth=1 -b $WOLFSSL_VER https://github.com/wolfSSL/wolfssl.git
        cd wolfssl
        ./autogen.sh
        ./configure ${{ matrix.build.wolfssl-configure }} --prefix=$HOME/all
        make install        
      name: 'install wolfssl'

    - run: |
        git clone --quiet --depth=1 -b openssl-3.0.9+quic https://github.com/quictls/openssl
        cd openssl
        ./config --prefix=$HOME/all --libdir=$HOME/all/lib
        make -j1 install_sw        
      name: 'install quictls'

    - run: |
        git clone --quiet --depth=1 -b v0.13.0 https://github.com/ngtcp2/nghttp3
        cd nghttp3
        autoreconf -fi
        ./configure --prefix=$HOME/all PKG_CONFIG_PATH="$HOME/all/lib/pkgconfig" --enable-lib-only
        make install        
      name: 'install nghttp3'

    - run: |
        git clone --quiet --depth=1 -b v0.17.0 https://github.com/ngtcp2/ngtcp2
        cd ngtcp2
        autoreconf -fi
        ./configure ${{ matrix.build.ngtcp2-configure }} --with-openssl  --with-wolfssl
        make install        
      name: 'install ngtcp2'

    - run: |
        git clone --quiet --depth=1 -b v1.55.1 https://github.com/nghttp2/nghttp2
        cd nghttp2
        autoreconf -fi
        ./configure --prefix=$HOME/all PKG_CONFIG_PATH="$HOME/all/lib/pkgconfig" --enable-http3
        make install        
      name: 'install nghttp2'

    - run: |
        git clone --quiet --depth=1 -b master https://github.com/icing/mod_h2
        cd mod_h2
        autoreconf -fi
        ./configure PKG_CONFIG_PATH="$HOME/all/lib/pkgconfig"
        make
        sudo make install        
      name: 'install mod_h2'

    - uses: actions/checkout@v3

    - run: |
        sudo python3 -m pip install -r tests/requirements.txt -r tests/http/requirements.txt        
      name: 'install python test prereqs'

    - run: autoreconf -fi
      name: 'autoreconf'

    - run: ./configure --with-wolfssl=$HOME/all ${{ matrix.build.configure }}
      name: 'configure'

    - run: make V=1
      name: 'make'

    - run: make V=1 examples
      name: 'make examples'

    - run: make V=1 -C tests
      name: 'make tests'

    - run: make V=1 test-ci
      name: 'run tests'
      env:
        TFLAGS: "${{ matrix.build.tflags }}"

    # Disabled for now, we see spurious SSL_connect() errors when talking
    # http/1.1 to apache and this, so far, is not reproducable in local testing
    #- run: pytest -v
    #  name: 'run pytest'
    #  env:
    #    TFLAGS: "${{ matrix.build.tflags }}"