From d6ae1081d5a168d5178c53db37bd0b581e662b10 Mon Sep 17 00:00:00 2001
From: Arne Schwabe <arne@rfc2549.org>
Date: Thu, 11 Aug 2022 19:27:12 +0200
Subject: [PATCH] Add mbed TLS from GIT to github actions

This builds against mbed TLS 3.5.0 and 2.28.5 as part of the github actions
with gcc and clang+asan and will allow us to see if changes are breaking
the OpenVPN mbed TLS support.

Change-Id: Ib3ba493eb05df8c160178b317a681ef17a24b8b5
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
---
 .github/workflows/build.yaml | 72 ++++++++++++++++++++++++++++++++++++
 1 file changed, 72 insertions(+)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 60eecd562..7900322a8 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -105,6 +105,78 @@ jobs:
       - name: make check
         run: make check
 
+  mbedtls-git:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-22.04]
+        ssllib: [mbedtls]
+        build: [normal, asan]
+        mbedver: [v3.5.0, v2.28.5]
+        include:
+        - build: asan
+          cflags: "-fsanitize=address,undefined -fno-sanitize-recover=all  -fno-optimize-sibling-calls -fsanitize-address-use-after-scope -fno-omit-frame-pointer -g -O1"
+          ldflags: -fsanitize=address,undefined -fno-sanitize-recover=all
+          cc: clang
+          cmakebuild: ASan
+        - build: normal
+          cflags: "-O2 -g"
+          ldflags: ""
+          configureflags: ""
+          cc: gcc
+          cmakebuild: Release
+
+    name: "${{matrix.cc}} ${{matrix.build}} - ${{matrix.os}} - mbed TLS ${{matrix.mbedver}}"
+    runs-on: ${{matrix.os}}
+    env:
+      CFLAGS: ${{ matrix.cflags }}
+      LDFLAGS: ${{ matrix.ldflags }}
+      CC: ${{matrix.cc}}
+      UBSAN_OPTIONS: print_stacktrace=1
+      MBEDTLS_CFLAGS: -I/opt/mbedtls/include
+      MBEDTLS_LIBS: -L/opt/mbedtls/lib -lmbedtls -lmbedx509 -lmbedcrypto
+
+    steps:
+      - name: Install dependencies
+        run: sudo apt update && sudo apt install -y build-essential liblzo2-dev libpam0g-dev liblz4-dev linux-libc-dev man2html clang libcmocka-dev python3-docutils libtool automake autoconf pkg-config libcap-ng-dev libnl-genl-3-dev cmake
+
+      - name: Cache dependencies
+        id: cache
+        uses: actions/cache@v3
+        with:
+          path: '/opt/mbedtls'
+          key: ${{ matrix.build }}-mbedtls-${{matrix.mbedver}}-${{matrix.cmakebuild}}
+      - name: "mbed TLS: checkout ${{matrix.mbedver}}"
+        if: steps.cache.outputs.cache-hit != 'true'
+        uses: actions/checkout@v3
+        with:
+          path: mbedtls
+          repository: mbed-TLS/mbedtls
+          ref: ${{matrix.mbedver}}
+      - name: "mbed TLS: cmake"
+        if: steps.cache.outputs.cache-hit != 'true'
+        run: cmake -DCMAKE_BUILD_TYPE=${{matrix.cmakebuild}} -DUSE_SHARED_MBEDTLS_LIBRARY=On -DCMAKE_INSTALL_PREFIX=/opt/mbedtls -B mbedbuild -S mbedtls
+      - name: "mbed TLS: build"
+        if: steps.cache.outputs.cache-hit != 'true'
+        run: cmake --build mbedbuild
+      - name: "mbed TLS: install"
+        if: steps.cache.outputs.cache-hit != 'true'
+        run: cmake --install mbedbuild
+      - name: add /opt/mbedtls/lib to ld.so.conf.d
+        run: echo /opt/mbedtls/lib | sudo tee /etc/ld.so.conf.d/mbedtls.conf
+      - name: "ldconfig"
+        run: sudo ldconfig
+      - name: Checkout OpenVPN
+        uses: actions/checkout@v3
+      - name: autoconf
+        run: autoreconf -fvi
+      - name: configure ${{matrix.configureflag}}
+        run: PKG_CONFIG_PATH=/opt/mbedtls/lib/pkgconfig ./configure --with-crypto-library=${{matrix.ssllib}} --enable-werror
+      - name: make all
+        run: make -j3
+      - name: make check
+        run: make check
+
   mingw:
     strategy:
       fail-fast: false