mirror of
https://github.com/openssl/openssl.git
synced 2024-12-03 05:41:46 +08:00
3ce3866389
Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> (Merged from https://github.com/openssl/openssl/pull/10639)
269 lines
11 KiB
YAML
269 lines
11 KiB
YAML
dist: xenial
|
|
sudo: required
|
|
|
|
osx_image: xcode9.3
|
|
|
|
language: c
|
|
cache: ccache
|
|
git:
|
|
submodules: false
|
|
quiet: true
|
|
|
|
before_install:
|
|
- if [ -n "$COVERALLS" ]; then
|
|
pip install --user cpp-coveralls;
|
|
fi;
|
|
- if expr "$CONFIG_OPTS" ":" ".*enable-external-tests" > /dev/null; then
|
|
git submodule update --init --recursive;
|
|
fi;
|
|
- eval "${MATRIX_EVAL}"
|
|
|
|
arch:
|
|
- amd64
|
|
- arm64
|
|
|
|
os:
|
|
- linux
|
|
- osx
|
|
|
|
compiler:
|
|
- clang
|
|
- gcc
|
|
|
|
env:
|
|
- CONFIG_OPTS="" DESTDIR="_install"
|
|
# Note: This CONFIG_OPTS entry must match the value in the exclude: table below that contains env: CONFIG_OPTS , otherwise it will not find a match.
|
|
- CONFIG_OPTS="no-asm -Werror --debug no-afalgeng no-shared enable-rc5 enable-md2 -fsanitize=address" LSAN_OPTIONS="report_objects=1"
|
|
- CONFIG_OPTS="no-asm no-makedepend enable-buildtest-c++ --strict-warnings -D_DEFAULT_SOURCE" BUILDONLY="yes" CHECKDOCS="yes" GENERATE="yes" CPPFLAGS="-ansi"
|
|
|
|
matrix:
|
|
include:
|
|
- os: linux
|
|
arch: arm64
|
|
dist: bionic
|
|
compiler: clang
|
|
env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated" BUILDONLY="yes"
|
|
- os: linux
|
|
arch: arm64
|
|
compiler: clang
|
|
addons:
|
|
apt:
|
|
packages:
|
|
- clang-6.0
|
|
env: EXTENDED_TEST="yes" CONFIG_OPTS="enable-msan disable-afalgeng -D__NO_STRING_INLINES -Wno-unused-command-line-argument" MATRIX_EVAL="CC=clang-6.0 && CXX=clang++-6.0"
|
|
- os: linux
|
|
arch: arm64
|
|
compiler: clang
|
|
addons:
|
|
apt:
|
|
packages:
|
|
- clang-6.0
|
|
env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 enable-ssl3 enable-ssl3-method enable-nextprotoneg no-shared enable-buildtest-c++ -fno-sanitize=alignment -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument" MATRIX_EVAL="CC=clang-6.0 && CXX=clang++-6.0"
|
|
- os: linux
|
|
arch: s390x
|
|
compiler: gcc
|
|
env: CONFIG_OPTS="--strict-warnings"
|
|
- os: linux-ppc64le
|
|
sudo: false
|
|
compiler: clang
|
|
env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES"
|
|
- os: linux
|
|
compiler: gcc
|
|
env: CONFIG_OPTS="--strict-warnings" COMMENT="Move to the BORINGTEST build when interoperable"
|
|
- os: linux
|
|
dist: trusty
|
|
compiler: clang
|
|
env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated"
|
|
- os: linux
|
|
dist: bionic
|
|
compiler: clang
|
|
env: CONFIG_OPTS="--strict-warnings -D__NO_STRING_INLINES no-deprecated" BUILDONLY="yes"
|
|
- os: linux
|
|
addons:
|
|
apt:
|
|
packages:
|
|
- binutils-mingw-w64
|
|
- gcc-mingw-w64
|
|
compiler: i686-w64-mingw32-gcc
|
|
env: CONFIG_OPTS="no-stdio" BUILDONLY="yes"
|
|
# Uncomment if there is reason to believe that PPC-specific problem
|
|
# can be diagnosed with this possibly >30 mins sanitizer build...
|
|
#- os: linux-ppc64le
|
|
# sudo: false
|
|
# compiler: gcc
|
|
# env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-asan enable-ubsan no-shared -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES"
|
|
- os: linux
|
|
addons:
|
|
apt:
|
|
packages:
|
|
- golang-1.10
|
|
compiler: gcc
|
|
env: EXTENDED_TEST="yes" CONFIG_OPTS="--debug --coverage no-asm enable-rc5 enable-md2 enable-ec_nistp_64_gcc_128 enable-ssl3 enable-ssl3-method enable-nextprotoneg enable-weak-ssl-ciphers no-shared enable-buildtest-c++ -DPEDANTIC -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION" COVERALLS="yes" BORINGSSL_TESTS="yes" CXX="g++"
|
|
- os: linux
|
|
addons:
|
|
apt:
|
|
packages:
|
|
- golang-1.10
|
|
compiler: gcc
|
|
env: EXTENDED_TEST="yes" CONFIG_OPTS="--debug enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers enable-external-tests enable-buildtest-c++" BORINGSSL_TESTS="yes" CXX="g++" TESTS=95
|
|
- os: linux
|
|
compiler: clang
|
|
env: EXTENDED_TEST="yes" CONFIG_OPTS="enable-msan disable-afalgeng -D__NO_STRING_INLINES -Wno-unused-command-line-argument"
|
|
- os: linux
|
|
compiler: clang
|
|
env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-ubsan enable-rc5 enable-md2 enable-ssl3 enable-ssl3-method enable-nextprotoneg no-shared enable-buildtest-c++ -fno-sanitize=alignment -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument" CXX="clang++"
|
|
- os: linux
|
|
compiler: clang
|
|
env: EXTENDED_TEST="yes" CONFIG_OPTS="no-asm enable-asan enable-rc5 enable-md2 no-shared -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION -D__NO_STRING_INLINES -Wno-unused-command-line-argument"
|
|
- os: linux
|
|
compiler: gcc
|
|
env: EXTENDED_TEST="yes" CONFIG_OPTS="--debug no-asm enable-ubsan enable-rc5 enable-md2 enable-buildtest-c++ -DPEDANTIC" OPENSSL_TEST_RAND_ORDER=0
|
|
- os: linux
|
|
addons:
|
|
apt:
|
|
packages:
|
|
- binutils-mingw-w64
|
|
- gcc-mingw-w64
|
|
compiler: i686-w64-mingw32-gcc
|
|
env: EXTENDED_TEST="yes" CONFIG_OPTS="no-pic"
|
|
- os: linux
|
|
addons:
|
|
apt:
|
|
packages:
|
|
- binutils-mingw-w64
|
|
- gcc-mingw-w64
|
|
compiler: x86_64-w64-mingw32-gcc
|
|
env: EXTENDED_TEST="yes" CONFIG_OPTS="no-pic"
|
|
- os: linux
|
|
language: python
|
|
python: 3.7
|
|
install: pip install flake8
|
|
before_script:
|
|
# stop the build if there are Python syntax errors or undefined names
|
|
- flake8 . --count --select=E901,E999,F821,F822,F823 --show-source --statistics
|
|
# exit-zero treats all errors as warnings. The GitHub editor is 127 chars wide
|
|
- flake8 . --count --exit-zero --max-complexity=10 --max-line-length=127 --statistics
|
|
script: true
|
|
exclude:
|
|
- os: linux
|
|
compiler: clang
|
|
- os: osx
|
|
compiler: gcc
|
|
- arch: arm64
|
|
os: osx
|
|
# arm64 times out when using -fsanitize=address
|
|
# The amd64 build should be sufficient to test this.
|
|
# Note: the env line must exactly match the env line from the build
|
|
# matrix above which contains the `-fsanitize=address` option.
|
|
# TODO: come up with a better way of doing this that is less error prone.
|
|
- arch: arm64
|
|
env: CONFIG_OPTS="no-asm -Werror --debug no-afalgeng no-shared enable-rc5 enable-md2 -fsanitize=address" LSAN_OPTIONS="report_objects=1"
|
|
|
|
|
|
before_script:
|
|
- env
|
|
- if [ "$TRAVIS_PULL_REQUEST" != "false" -a -n "$EXTENDED_TEST" ]; then
|
|
(git log -1 $TRAVIS_COMMIT_RANGE | grep '\[extended tests\]' > /dev/null) || travis_terminate 0;
|
|
fi
|
|
- if [ -n "$DESTDIR" ]; then
|
|
sh .travis-create-release.sh $TRAVIS_OS_NAME;
|
|
tar -xzf _srcdist.tar.gz;
|
|
mkdir _build;
|
|
cd _build;
|
|
srcdir=../_srcdist;
|
|
top=..;
|
|
else
|
|
srcdir=.;
|
|
top=.;
|
|
fi
|
|
- if [ "$CC" = i686-w64-mingw32-gcc ]; then
|
|
export CROSS_COMPILE=${CC%%gcc}; unset CC;
|
|
$srcdir/Configure mingw $CONFIG_OPTS -Wno-pedantic-ms-format;
|
|
elif [ "$CC" = x86_64-w64-mingw32-gcc ]; then
|
|
export CROSS_COMPILE=${CC%%gcc}; unset CC;
|
|
$srcdir/Configure mingw64 $CONFIG_OPTS -Wno-pedantic-ms-format;
|
|
else
|
|
if which ccache >/dev/null && test "$BORINGSSL_TESTS" != yes; then
|
|
CC="ccache $CC";
|
|
fi;
|
|
$srcdir/config -v $CONFIG_OPTS;
|
|
fi
|
|
- ./configdata.pm --dump
|
|
- cd $top
|
|
|
|
script:
|
|
- if [ -z "$BUILDONLY" ]; then
|
|
make="make -s";
|
|
else
|
|
make="make";
|
|
fi
|
|
- if [ -n "$GENERATE" ]; then
|
|
make2="$make PERL=no-perl";
|
|
else
|
|
make2="$make";
|
|
fi
|
|
- top=${PWD}
|
|
- if [ -n "$DESTDIR" ]; then
|
|
cd _build;
|
|
fi
|
|
- if ! $make update; then
|
|
echo -e '\052\052 FAILED -- MAKE UPDATE';
|
|
travis_terminate 1;
|
|
fi
|
|
- if ! git diff --exit-code; then
|
|
echo -e '\052\052 FAILED -- UPDATED FILES NOT COMMITTED';
|
|
travis_terminate 1;
|
|
fi
|
|
- if test -n "$GENERATE" && ! $make build_all_generated; then
|
|
echo -e '\052\052 FAILED -- MAKE BUILD_ALL_GENERATED';
|
|
travis_terminate 1;
|
|
fi
|
|
- if test -n "$CHECKDOCS" && ! $make doc-nits; then
|
|
echo -e '\052\052 FAILED -- MAKE DOC-NITS';
|
|
travis_terminate 1;
|
|
fi
|
|
- if ! $make2; then
|
|
echo -e '\052\052 FAILED -- MAKE';
|
|
travis_terminate 1;
|
|
fi;
|
|
- if [ -z "$BUILDONLY" ]; then
|
|
if [ -n "$CROSS_COMPILE" ]; then
|
|
sudo dpkg --add-architecture i386;
|
|
sudo apt-get update;
|
|
sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install wine;
|
|
export EXE_SHELL="wine" WINEPREFIX=`pwd`;
|
|
fi;
|
|
if [ -e krb5/src ]; then
|
|
sudo apt-get -yq install bison dejagnu gettext keyutils ldap-utils libldap2-dev libkeyutils-dev python-cjson python-paste python-pyrad slapd tcl-dev tcsh;
|
|
fi;
|
|
if ! HARNESS_VERBOSE_FAILURE=yes BORING_RUNNER_DIR=$top/boringssl/ssl/test/runner make test; then
|
|
echo -e '\052\052 FAILED -- MAKE TEST';
|
|
travis_terminate 1;
|
|
fi;
|
|
else
|
|
if ! $make build_tests >~/build.log 2>&1; then
|
|
echo -e '\052\052 FAILED -- MAKE BUILD_TESTS';
|
|
cat ~/build.log
|
|
travis_terminate 1;
|
|
fi;
|
|
fi
|
|
- if [ -n "$DESTDIR" ]; then
|
|
mkdir "$top/$DESTDIR";
|
|
if ! $make install DESTDIR="$top/$DESTDIR" >~/install.log 2>&1 ; then
|
|
echo -e '\052\052 FAILED -- MAKE INSTALL';
|
|
cat ~/install.log;
|
|
travis_terminate 1;
|
|
fi;
|
|
fi
|
|
- cd $top
|
|
- echo -e '\052\052 DONE'
|
|
|
|
after_success:
|
|
- if [ -n "$COVERALLS" ]; then
|
|
coveralls -b . --gcov gcov --gcov-options '\-lpbc';
|
|
fi;
|
|
|
|
notifications:
|
|
email:
|
|
secure: "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"
|