Skip to content

Backport of fix https://go-review.googlesource.com/c/go/+/533215/ to … #25

Backport of fix https://go-review.googlesource.com/c/go/+/533215/ to …

Backport of fix https://go-review.googlesource.com/c/go/+/533215/ to … #25

Workflow file for this run

name: Build and test
on:
pull_request:
branches:
# - go1.18-openssl-fips
env:
GOROOT_BOOTSTRAP: "/"
GOROOT_FINAL: "/usr/lib/golang"
GOHOSTOS: "linux"
GOHOSTARCH: "amd64"
GOOS: "linux"
GOARCH: "amd64"
jobs:
build:
runs-on: ubuntu-latest
container:
image: ghcr.io/golang-fips/go:main
steps:
- name: Checkout repository
uses: actions/checkout@v2
- name: Build
run: |
pushd $GITHUB_WORKSPACE/src
./make.bash -v
popd
shell: bash
- name: Test
run: |
export GOROOT=$GITHUB_WORKSPACE
pushd $GITHUB_WORKSPACE/src
PATH="$GOROOT/bin:$PATH" ./run.bash -v -v -v -k --no-rebuild
popd
shell: bash
- name: Test with FIPS enabled
run: |
export GOROOT=$GITHUB_WORKSPACE
export PATH=$GOROOT/bin:$PATH
export OPENSSL_FORCE_FIPS_MODE=1
pushd $GITHUB_WORKSPACE/src/crypto
# Run all crypto tests but skip TLS, we will run FIPS specific TLS tests later
GOLANG_FIPS=1 go test $(go list ./... | grep -v tls) -v
# Check that signature functions have parity between boring and notboring
CGO_ENABLED=0 go test $(go list ./... | grep -v tls) -v
popd
# Run all FIPS specific TLS tests
pushd $GITHUB_WORKSPACE/src/crypto
GOLANG_FIPS=1 go test -v -run "Boring"
popd
shell: bash