mbox series

[ima-evm-utils,v2,0/4] Enable and disable OpenSSL provider tests

Message ID 20240624220157.2248556-1-stefanb@linux.vnet.ibm.com (mailing list archive)
Headers show
Series Enable and disable OpenSSL provider tests | expand

Message

Stefan Berger June 24, 2024, 10:01 p.m. UTC 
This series enables tests with OpenSSL providers on Ubuntu for testing with
pkcs11 and SoftHSM. At the same time it disables testing with OpenSSL
providers on AltLinux and Debian due to an issue that most likely stems
from a bug in a dependency (OpenSSL, p11-kit-modules, SoftHSM, or others).

Thanks to Jonathan McDowell for the backtrace on Debian. It seemms to be
the same problem as on AltLinux - a locking issue in the C_Login ->
C_OpenSession callpath that blocks forever in a pthread_mutex_lock().

https://lore.kernel.org/linux-integrity/20240621005912.1365462-1-stefanb@linux.vnet.ibm.com/T/#meb2e76c337fe8d140cdbcc699c0606d31d7749a2

v2:
  - dropped ci/cd changes from 3/4 in favor of 4/4

Regards,
   Stefan

Stefan Berger (4):
  Call OPENSSL_Cleanup before main exit to avoid crashes when engine was
    used
  CI/CD: Disable pkcs11 providers for Debian and AltLinux
  CI/CD: Prepare Ubuntu 24.04 (Noble) to run provider tests
  Replace Ubuntu mantic with noble

 .github/workflows/ci.yml |  5 ++--
 .travis.yml              |  4 +--
 ci/alt.sh                |  2 +-
 ci/debian.sh             |  2 +-
 ci/ubuntu.sh             | 63 +++++++++++++++++++++++++++++++++++++++-
 src/evmctl.c             |  3 ++
 6 files changed, 71 insertions(+), 8 deletions(-)
 mode change 120000 => 100755 ci/ubuntu.sh