blob: 4e90d9e42957f0bf057bc4697b16b4b73e995b4d [file] [log] [blame]
Gilles Peskine62cf2e82020-03-27 16:35:23 +01001#! /usr/bin/env bash
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01002
Simon Butcher3ea7f522016-03-07 23:22:10 +00003# all.sh
4#
Bence Szépkúti1e148272020-08-07 13:07:28 +02005# Copyright The Mbed TLS Contributors
Bence Szépkútic7da1fe2020-05-26 01:54:15 +02006# SPDX-License-Identifier: Apache-2.0
7#
8# Licensed under the Apache License, Version 2.0 (the "License"); you may
9# not use this file except in compliance with the License.
10# You may obtain a copy of the License at
11#
12# http://www.apache.org/licenses/LICENSE-2.0
13#
14# Unless required by applicable law or agreed to in writing, software
15# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17# See the License for the specific language governing permissions and
18# limitations under the License.
Gilles Peskine192c72f2017-12-21 15:59:21 +010019
20
21
22################################################################
23#### Documentation
24################################################################
25
Simon Butcher3ea7f522016-03-07 23:22:10 +000026# Purpose
Gilles Peskine192c72f2017-12-21 15:59:21 +010027# -------
Simon Butcher3ea7f522016-03-07 23:22:10 +000028#
SimonB2e23c822016-04-16 21:54:39 +010029# To run all tests possible or available on the platform.
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +010030#
Gilles Peskine192c72f2017-12-21 15:59:21 +010031# Notes for users
32# ---------------
33#
SimonB2e23c822016-04-16 21:54:39 +010034# Warning: the test is destructive. It includes various build modes and
35# configurations, and can and will arbitrarily change the current CMake
Gilles Peskine192c72f2017-12-21 15:59:21 +010036# configuration. The following files must be committed into git:
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +020037# * include/mbedtls/mbedtls_config.h
Gilles Peskine636c26a2020-03-04 20:46:15 +010038# * Makefile, library/Makefile, programs/Makefile, tests/Makefile,
39# programs/fuzz/Makefile
Gilles Peskine192c72f2017-12-21 15:59:21 +010040# After running this script, the CMake cache will be lost and CMake
41# will no longer be initialised.
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +010042#
Gilles Peskine192c72f2017-12-21 15:59:21 +010043# The script assumes the presence of a number of tools:
44# * Basic Unix tools (Windows users note: a Unix-style find must be before
45# the Windows find in the PATH)
46# * Perl
47# * GNU Make
48# * CMake
49# * GCC and Clang (recent enough for using ASan with gcc and MemSan with clang, or valgrind)
Andrzej Kurek05be06c2018-06-28 04:41:50 -040050# * G++
Gilles Peskine192c72f2017-12-21 15:59:21 +010051# * arm-gcc and mingw-gcc
52# * ArmCC 5 and ArmCC 6, unless invoked with --no-armcc
Gilles Peskine192c72f2017-12-21 15:59:21 +010053# * OpenSSL and GnuTLS command line tools, recent enough for the
Mateusz Starzykf5c53512021-04-15 13:28:52 +020054# interoperability tests. If they don't support old features which we want
55# to test, then a legacy version of these tools must be present as well
56# (search for LEGACY below).
Gilles Peskine192c72f2017-12-21 15:59:21 +010057# See the invocation of check_tools below for details.
58#
59# This script must be invoked from the toplevel directory of a git
60# working copy of Mbed TLS.
61#
Gilles Peskinece266c42020-03-28 18:50:43 +010062# The behavior on an error depends on whether --keep-going (alias -k)
63# is in effect.
64# * Without --keep-going: the script stops on the first error without
65# cleaning up. This lets you work in the configuration of the failing
66# component.
67# * With --keep-going: the script runs all requested components and
68# reports failures at the end. In particular the script always cleans
69# up on exit.
70#
Gilles Peskine192c72f2017-12-21 15:59:21 +010071# Note that the output is not saved. You may want to run
72# script -c tests/scripts/all.sh
73# or
74# tests/scripts/all.sh >all.log 2>&1
75#
76# Notes for maintainers
77# ---------------------
78#
Gilles Peskine8f073122018-11-27 15:58:47 +010079# The bulk of the code is organized into functions that follow one of the
80# following naming conventions:
81# * pre_XXX: things to do before running the tests, in order.
82# * component_XXX: independent components. They can be run in any order.
Gilles Peskinec70637a2019-01-09 22:29:17 +010083# * component_check_XXX: quick tests that aren't worth parallelizing.
84# * component_build_XXX: build things but don't run them.
85# * component_test_XXX: build and test.
Gilles Peskine878cf602019-01-06 20:50:38 +000086# * support_XXX: if support_XXX exists and returns false then
87# component_XXX is not run by default.
Gilles Peskine8f073122018-11-27 15:58:47 +010088# * post_XXX: things to do after running the tests.
89# * other: miscellaneous support functions.
90#
Gilles Peskinec70637a2019-01-09 22:29:17 +010091# Each component must start by invoking `msg` with a short informative message.
92#
Gilles Peskinea681c592020-03-28 21:27:40 +010093# Warning: due to the way bash detects errors, the failure of a command
94# inside 'if' or '!' is not detected. Use the 'not' function instead of '!'.
95#
Gilles Peskinece266c42020-03-28 18:50:43 +010096# Each component is executed in a separate shell process. The component
97# fails if any command in it returns a non-zero status.
98#
Gilles Peskinec70637a2019-01-09 22:29:17 +010099# The framework performs some cleanup tasks after each component. This
100# means that components can assume that the working directory is in a
101# cleaned-up state, and don't need to perform the cleanup themselves.
102# * Run `make clean`.
Bence Szépkúti414d6bd2021-06-28 14:11:11 +0100103# * Restore `include/mbedtls/mbedtls_config.h` from a backup made before running
Gilles Peskinec70637a2019-01-09 22:29:17 +0100104# the component.
Gilles Peskine636c26a2020-03-04 20:46:15 +0100105# * Check out `Makefile`, `library/Makefile`, `programs/Makefile`,
106# `tests/Makefile` and `programs/fuzz/Makefile` from git.
107# This cleans up after an in-tree use of CMake.
Gilles Peskinec70637a2019-01-09 22:29:17 +0100108#
Gilles Peskine192c72f2017-12-21 15:59:21 +0100109# The tests are roughly in order from fastest to slowest. This doesn't
110# have to be exact, but in general you should add slower tests towards
111# the end and fast checks near the beginning.
Gilles Peskine192c72f2017-12-21 15:59:21 +0100112
113
114
115################################################################
116#### Initialization and command line parsing
117################################################################
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100118
Gilles Peskine36647802020-03-28 18:50:49 +0100119# Abort on errors (even on the left-hand side of a pipe).
120# Treat uninitialised variables as errors.
121set -e -o pipefail -u
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100122
Gilles Peskine8f073122018-11-27 15:58:47 +0100123pre_check_environment () {
Gilles Peskinea16c2b12019-01-06 19:58:02 +0000124 if [ -d library -a -d include -a -d tests ]; then :; else
Gilles Peskine8f073122018-11-27 15:58:47 +0100125 echo "Must be run from mbed TLS root" >&2
126 exit 1
127 fi
128}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100129
Gilles Peskine8f073122018-11-27 15:58:47 +0100130pre_initialize_variables () {
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200131 CONFIG_H='include/mbedtls/mbedtls_config.h'
John Durkopbd069d32020-10-31 22:14:03 -0700132 CRYPTO_CONFIG_H='include/psa/crypto_config.h'
Gilles Peskinef83eb822020-03-30 20:11:39 +0200133
134 # Files that are clobbered by some jobs will be backed up. Use a different
135 # suffix from auxiliary scripts so that all.sh and auxiliary scripts can
136 # independently decide when to remove the backup file.
137 backup_suffix='.all.bak'
138 # Files clobbered by config.py
139 files_to_back_up="$CONFIG_H $CRYPTO_CONFIG_H"
Gilles Peskine568f53a2021-07-12 18:16:01 +0200140 # Files clobbered by in-tree cmake
141 files_to_back_up="$files_to_back_up Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile"
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200142
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200143 append_outcome=0
Gilles Peskine8f073122018-11-27 15:58:47 +0100144 MEMORY=0
145 FORCE=0
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200146 QUIET=0
Gilles Peskine8f073122018-11-27 15:58:47 +0100147 KEEP_GOING=0
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100148
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200149 # Seed value used with the --release-test option.
Manuel Pégourié-Gonnard54304472020-06-22 10:11:47 +0200150 #
151 # See also RELEASE_SEED in basic-build-test.sh. Debugging is easier if
152 # both values are kept in sync. If you change the value here because it
153 # breaks some tests, you'll definitely want to change it in
154 # basic-build-test.sh as well.
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200155 RELEASE_SEED=1
156
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200157 : ${MBEDTLS_TEST_OUTCOME_FILE=}
Gilles Peskine9004a172019-09-16 15:20:36 +0200158 : ${MBEDTLS_TEST_PLATFORM="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"}
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200159 export MBEDTLS_TEST_OUTCOME_FILE
Gilles Peskine9004a172019-09-16 15:20:36 +0200160 export MBEDTLS_TEST_PLATFORM
161
Jaeden Ameroc4cc2512019-01-30 15:35:44 +0000162 # Default commands, can be overridden by the environment
Gilles Peskine8f073122018-11-27 15:58:47 +0100163 : ${OPENSSL:="openssl"}
164 : ${OPENSSL_LEGACY:="$OPENSSL"}
165 : ${OPENSSL_NEXT:="$OPENSSL"}
166 : ${GNUTLS_CLI:="gnutls-cli"}
167 : ${GNUTLS_SERV:="gnutls-serv"}
168 : ${GNUTLS_LEGACY_CLI:="$GNUTLS_CLI"}
169 : ${GNUTLS_LEGACY_SERV:="$GNUTLS_SERV"}
170 : ${OUT_OF_SOURCE_DIR:=./mbedtls_out_of_source_build}
171 : ${ARMC5_BIN_DIR:=/usr/bin}
172 : ${ARMC6_BIN_DIR:=/usr/bin}
Gilles Peskine6d061342020-04-30 18:19:32 +0200173 : ${ARM_NONE_EABI_GCC_PREFIX:=arm-none-eabi-}
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200174 : ${ARM_LINUX_GNUEABI_GCC_PREFIX:=arm-linux-gnueabi-}
Andres AGdc192212016-08-31 17:33:13 +0100175
Gilles Peskine8f073122018-11-27 15:58:47 +0100176 # if MAKEFLAGS is not set add the -j option to speed up invocations of make
Gilles Peskinea1fc4b52019-01-06 20:15:26 +0000177 if [ -z "${MAKEFLAGS+set}" ]; then
Gilles Peskine050d2fc2021-09-30 18:24:21 +0200178 export MAKEFLAGS="-j$(all_sh_nproc)"
Gilles Peskine8f073122018-11-27 15:58:47 +0100179 fi
Gilles Peskine878cf602019-01-06 20:50:38 +0000180
Gilles Peskine396853a2021-09-20 18:57:55 +0200181 # Include more verbose output for failing tests run by CMake or make
Jaeden Amerod48e9c72019-02-07 17:43:39 +0000182 export CTEST_OUTPUT_ON_FAILURE=1
183
Gilles Peskine8fd59422019-10-21 17:11:33 +0200184 # CFLAGS and LDFLAGS for Asan builds that don't use CMake
Gilles Peskine5ca393f2019-10-21 19:06:33 +0200185 ASAN_CFLAGS='-Werror -Wall -Wextra -fsanitize=address,undefined -fno-sanitize-recover=all'
Gilles Peskine8fd59422019-10-21 17:11:33 +0200186
Gilles Peskine878cf602019-01-06 20:50:38 +0000187 # Gather the list of available components. These are the functions
188 # defined in this script whose name starts with "component_".
Gilles Peskine62cf2e82020-03-27 16:35:23 +0100189 # Parse the script with sed. This way we get the functions in the order
190 # they are defined.
Gilles Peskine878cf602019-01-06 20:50:38 +0000191 ALL_COMPONENTS=$(sed -n 's/^ *component_\([0-9A-Z_a-z]*\) *().*/\1/p' <"$0")
192
193 # Exclude components that are not supported on this platform.
194 SUPPORTED_COMPONENTS=
195 for component in $ALL_COMPONENTS; do
196 case $(type "support_$component" 2>&1) in
197 *' function'*)
198 if ! support_$component; then continue; fi;;
199 esac
200 SUPPORTED_COMPONENTS="$SUPPORTED_COMPONENTS $component"
201 done
Gilles Peskine8f073122018-11-27 15:58:47 +0100202}
Andres AG38495a32016-07-12 16:54:33 +0100203
Gilles Peskinea28db922019-01-10 00:05:18 +0100204# Test whether the component $1 is included in the command line patterns.
205is_component_included()
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100206{
Gilles Peskine03af6782021-08-06 11:35:17 +0200207 # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS
208 # only does word splitting.
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100209 set -f
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000210 for pattern in $COMMAND_LINE_COMPONENTS; do
Gilles Peskine81b96ed2018-11-27 21:37:53 +0100211 set +f
212 case ${1#component_} in $pattern) return 0;; esac
213 done
214 set +f
215 return 1
216}
Andres AG7770ea82016-10-10 15:46:20 +0100217
Simon Butcher41eeccf2016-09-07 00:07:09 +0100218usage()
Andres AGd9eba4b2016-08-26 14:42:14 +0100219{
Gilles Peskine709346a2017-12-10 23:43:39 +0100220 cat <<EOF
Gilles Peskine92525112018-11-27 18:15:35 +0100221Usage: $0 [OPTION]... [COMPONENT]...
Gilles Peskine348fb9a2018-11-27 17:04:29 +0100222Run mbedtls release validation tests.
Gilles Peskine92525112018-11-27 18:15:35 +0100223By default, run all tests. With one or more COMPONENT, run only those.
Gilles Peskinea28db922019-01-10 00:05:18 +0100224COMPONENT can be the name of a component or a shell wildcard pattern.
225
226Examples:
227 $0 "check_*"
228 Run all sanity checks.
229 $0 --no-armcc --except test_memsan
230 Run everything except builds that require armcc and MemSan.
Gilles Peskine348fb9a2018-11-27 17:04:29 +0100231
232Special options:
233 -h|--help Print this help and exit.
Gilles Peskine878cf602019-01-06 20:50:38 +0000234 --list-all-components List all available test components and exit.
235 --list-components List components supported on this platform and exit.
Gilles Peskine709346a2017-12-10 23:43:39 +0100236
237General options:
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200238 -q|--quiet Only output component names, and errors if any.
Gilles Peskine709346a2017-12-10 23:43:39 +0100239 -f|--force Force the tests to overwrite any modified files.
Gilles Peskine7c652162017-12-11 00:01:40 +0100240 -k|--keep-going Run all tests and report errors at the end.
Gilles Peskine709346a2017-12-10 23:43:39 +0100241 -m|--memory Additional optional memory tests.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200242 --append-outcome Append to the outcome file (if used).
Gilles Peskine6d061342020-04-30 18:19:32 +0200243 --arm-none-eabi-gcc-prefix=<string>
244 Prefix for a cross-compiler for arm-none-eabi
245 (default: "${ARM_NONE_EABI_GCC_PREFIX}")
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200246 --arm-linux-gnueabi-gcc-prefix=<string>
247 Prefix for a cross-compiler for arm-linux-gnueabi
248 (default: "${ARM_LINUX_GNUEABI_GCC_PREFIX}")
Gilles Peskinebca6ab92017-12-19 18:24:31 +0100249 --armcc Run ARM Compiler builds (on by default).
Gilles Peskine80ddb992021-08-06 11:51:59 +0200250 --restore First clean up the build tree, restoring backed up
251 files. Do not run any components unless they are
252 explicitly specified.
Gilles Peskine5d996822020-03-28 21:09:21 +0100253 --error-test Error test mode: run a failing function in addition
Gilles Peskine86f61292021-08-05 15:11:33 +0200254 to any specified component. May be repeated.
Gilles Peskinea28db922019-01-10 00:05:18 +0100255 --except Exclude the COMPONENTs listed on the command line,
256 instead of running only those.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200257 --no-append-outcome Write a new outcome file and analyze it (default).
Gilles Peskinebca6ab92017-12-19 18:24:31 +0100258 --no-armcc Skip ARM Compiler builds.
Gilles Peskine38d81652018-03-21 08:40:26 +0100259 --no-force Refuse to overwrite modified files (default).
260 --no-keep-going Stop at the first error (default).
261 --no-memory No additional memory tests (default).
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200262 --no-quiet Print full ouput from components.
Gilles Peskine709346a2017-12-10 23:43:39 +0100263 --out-of-source-dir=<path> Directory used for CMake out-of-source build tests.
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200264 --outcome-file=<path> File where test outcomes are written (not done if
265 empty; default: \$MBEDTLS_TEST_OUTCOME_FILE).
Gilles Peskine38d81652018-03-21 08:40:26 +0100266 --random-seed Use a random seed value for randomized tests (default).
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200267 -r|--release-test Run this script in release mode. This fixes the seed value to ${RELEASE_SEED}.
Gilles Peskine709346a2017-12-10 23:43:39 +0100268 -s|--seed Integer seed value to use for this test run.
269
270Tool path options:
271 --armc5-bin-dir=<ARMC5_bin_dir_path> ARM Compiler 5 bin directory.
272 --armc6-bin-dir=<ARMC6_bin_dir_path> ARM Compiler 6 bin directory.
273 --gnutls-cli=<GnuTLS_cli_path> GnuTLS client executable to use for most tests.
274 --gnutls-serv=<GnuTLS_serv_path> GnuTLS server executable to use for most tests.
275 --gnutls-legacy-cli=<GnuTLS_cli_path> GnuTLS client executable to use for legacy tests.
276 --gnutls-legacy-serv=<GnuTLS_serv_path> GnuTLS server executable to use for legacy tests.
277 --openssl=<OpenSSL_path> OpenSSL executable to use for most tests.
Mateusz Starzyk06b07fb2021-02-18 13:55:21 +0100278 --openssl-legacy=<OpenSSL_path> OpenSSL executable to use for legacy tests..
Manuel Pégourié-Gonnard6b368922018-02-20 12:02:07 +0100279 --openssl-next=<OpenSSL_path> OpenSSL executable to use for recent things like ARIA
Gilles Peskine709346a2017-12-10 23:43:39 +0100280EOF
SimonB2e23c822016-04-16 21:54:39 +0100281}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100282
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200283# Cleanup before/after running a component.
284# Remove built files as well as the cmake cache/config.
285# Does not remove generated source files.
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100286cleanup()
287{
Gilles Peskine7c652162017-12-11 00:01:40 +0100288 command make clean
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200289
Gilles Peskine31b07e22018-03-21 12:15:06 +0100290 # Remove CMake artefacts
Jaeden Amero2d0e00f2018-11-07 18:46:41 +0000291 find . -name .git -prune -o \
Gilles Peskine31b07e22018-03-21 12:15:06 +0100292 -iname CMakeFiles -exec rm -rf {} \+ -o \
293 \( -iname cmake_install.cmake -o \
294 -iname CTestTestfile.cmake -o \
Manuel Pégourié-Gonnardbfe54d72021-09-09 11:11:44 +0200295 -iname CMakeCache.txt -o \
296 -path './cmake/*.cmake' \) -exec rm -f {} \+
Gilles Peskine31b07e22018-03-21 12:15:06 +0100297 # Recover files overwritten by in-tree CMake builds
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +0000298 rm -f include/Makefile include/mbedtls/Makefile programs/*/Makefile
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200299
Jaeden Ameroab83fdf2019-06-20 17:38:22 +0100300 # Remove any artifacts from the component_test_cmake_as_subdirectory test.
301 rm -rf programs/test/cmake_subproject/build
302 rm -f programs/test/cmake_subproject/Makefile
303 rm -f programs/test/cmake_subproject/cmake_subproject
304
Chris Kayd259e342021-03-25 16:03:25 +0000305 # Remove any artifacts from the component_test_cmake_as_package test.
306 rm -rf programs/test/cmake_package/build
307 rm -f programs/test/cmake_package/Makefile
308 rm -f programs/test/cmake_package/cmake_package
309
310 # Remove any artifacts from the component_test_cmake_as_installed_package test.
311 rm -rf programs/test/cmake_package_install/build
312 rm -f programs/test/cmake_package_install/Makefile
313 rm -f programs/test/cmake_package_install/cmake_package_install
314
Gilles Peskinef83eb822020-03-30 20:11:39 +0200315 # Restore files that may have been clobbered by the job
316 for x in $files_to_back_up; do
317 cp -p "$x$backup_suffix" "$x"
318 done
319}
John Durkopbd069d32020-10-31 22:14:03 -0700320
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200321# Final cleanup when this script exits (except when exiting on a failure
322# in non-keep-going mode).
Gilles Peskinef83eb822020-03-30 20:11:39 +0200323final_cleanup () {
324 cleanup
325
326 for x in $files_to_back_up; do
327 rm -f "$x$backup_suffix"
328 done
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100329}
330
Gilles Peskine7c652162017-12-11 00:01:40 +0100331# Executed on exit. May be redefined depending on command line options.
332final_report () {
333 :
334}
335
336fatal_signal () {
Gilles Peskinef83eb822020-03-30 20:11:39 +0200337 final_cleanup
Gilles Peskine7c652162017-12-11 00:01:40 +0100338 final_report $1
339 trap - $1
340 kill -$1 $$
341}
342
343trap 'fatal_signal HUP' HUP
344trap 'fatal_signal INT' INT
345trap 'fatal_signal TERM' TERM
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200346
Gilles Peskine050d2fc2021-09-30 18:24:21 +0200347# Number of processors on this machine. Used as the default setting
348# for parallel make.
349all_sh_nproc ()
350{
351 {
352 nproc || # Linux
353 sysctl -n hw.ncpuonline || # NetBSD, OpenBSD
354 sysctl -n hw.ncpu || # FreeBSD
355 echo 1
356 } 2>/dev/null
357}
358
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100359msg()
360{
Gilles Peskineffcdeff2018-12-04 12:49:28 +0100361 if [ -n "${current_component:-}" ]; then
362 current_section="${current_component#component_}: $1"
363 else
364 current_section="$1"
365 fi
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200366
367 if [ $QUIET -eq 1 ]; then
368 return
369 fi
370
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100371 echo ""
372 echo "******************************************************************"
Gilles Peskineffcdeff2018-12-04 12:49:28 +0100373 echo "* $current_section "
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +0000374 printf "* "; date
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +0100375 echo "******************************************************************"
376}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +0100377
Gilles Peskine8f073122018-11-27 15:58:47 +0100378armc6_build_test()
379{
380 FLAGS="$1"
Andres AGa5cd9732016-10-17 15:23:10 +0100381
Gilles Peskine18487f62020-04-30 23:11:54 +0200382 msg "build: ARM Compiler 6 ($FLAGS)"
Gilles Peskine8f073122018-11-27 15:58:47 +0100383 ARM_TOOL_VARIANT="ult" CC="$ARMC6_CC" AR="$ARMC6_AR" CFLAGS="$FLAGS" \
384 WARNING_CFLAGS='-xc -std=c99' make lib
Gilles Peskine18487f62020-04-30 23:11:54 +0200385
386 msg "size: ARM Compiler 6 ($FLAGS)"
387 "$ARMC6_FROMELF" -z library/*.o
388
Gilles Peskine8f073122018-11-27 15:58:47 +0100389 make clean
390}
Andres AGa5cd9732016-10-17 15:23:10 +0100391
Andres AGd9eba4b2016-08-26 14:42:14 +0100392err_msg()
393{
394 echo "$1" >&2
395}
396
397check_tools()
398{
399 for TOOL in "$@"; do
Andres AG98393602017-01-31 17:04:45 +0000400 if ! `type "$TOOL" >/dev/null 2>&1`; then
Andres AGd9eba4b2016-08-26 14:42:14 +0100401 err_msg "$TOOL not found!"
402 exit 1
403 fi
404 done
405}
406
Gilles Peskine8f073122018-11-27 15:58:47 +0100407pre_parse_command_line () {
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000408 COMMAND_LINE_COMPONENTS=
Gilles Peskinea28db922019-01-10 00:05:18 +0100409 all_except=0
Gilles Peskine5d996822020-03-28 21:09:21 +0100410 error_test=0
Gilles Peskine80ddb992021-08-06 11:51:59 +0200411 restore_first=0
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000412 no_armcc=
SimonB2e23c822016-04-16 21:54:39 +0100413
Jaeden Amero9b90f2e2018-11-02 18:34:17 +0000414 # Note that legacy options are ignored instead of being omitted from this
415 # list of options, so invocations that worked with previous version of
416 # all.sh will still run and work properly.
Gilles Peskine8f073122018-11-27 15:58:47 +0100417 while [ $# -gt 0 ]; do
Gilles Peskine55f7c942019-01-09 22:28:21 +0100418 case "$1" in
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200419 --append-outcome) append_outcome=1;;
Gilles Peskine6d061342020-04-30 18:19:32 +0200420 --arm-none-eabi-gcc-prefix) shift; ARM_NONE_EABI_GCC_PREFIX="$1";;
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +0200421 --arm-linux-gnueabi-gcc-prefix) shift; ARM_LINUX_GNUEABI_GCC_PREFIX="$1";;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000422 --armcc) no_armcc=;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100423 --armc5-bin-dir) shift; ARMC5_BIN_DIR="$1";;
424 --armc6-bin-dir) shift; ARMC6_BIN_DIR="$1";;
Gilles Peskine5d996822020-03-28 21:09:21 +0100425 --error-test) error_test=$((error_test + 1));;
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000426 --except) all_except=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100427 --force|-f) FORCE=1;;
428 --gnutls-cli) shift; GNUTLS_CLI="$1";;
429 --gnutls-legacy-cli) shift; GNUTLS_LEGACY_CLI="$1";;
430 --gnutls-legacy-serv) shift; GNUTLS_LEGACY_SERV="$1";;
431 --gnutls-serv) shift; GNUTLS_SERV="$1";;
432 --help|-h) usage; exit;;
433 --keep-going|-k) KEEP_GOING=1;;
Gilles Peskine878cf602019-01-06 20:50:38 +0000434 --list-all-components) printf '%s\n' $ALL_COMPONENTS; exit;;
435 --list-components) printf '%s\n' $SUPPORTED_COMPONENTS; exit;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100436 --memory|-m) MEMORY=1;;
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200437 --no-append-outcome) append_outcome=0;;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000438 --no-armcc) no_armcc=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100439 --no-force) FORCE=0;;
440 --no-keep-going) KEEP_GOING=0;;
441 --no-memory) MEMORY=0;;
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200442 --no-quiet) QUIET=0;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100443 --openssl) shift; OPENSSL="$1";;
444 --openssl-legacy) shift; OPENSSL_LEGACY="$1";;
445 --openssl-next) shift; OPENSSL_NEXT="$1";;
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200446 --outcome-file) shift; MBEDTLS_TEST_OUTCOME_FILE="$1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100447 --out-of-source-dir) shift; OUT_OF_SOURCE_DIR="$1";;
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200448 --quiet|-q) QUIET=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100449 --random-seed) unset SEED;;
Manuel Pégourié-Gonnarde0501912020-06-08 12:59:27 +0200450 --release-test|-r) SEED=$RELEASE_SEED;;
Gilles Peskine80ddb992021-08-06 11:51:59 +0200451 --restore) restore_first=1;;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100452 --seed|-s) shift; SEED="$1";;
453 -*)
454 echo >&2 "Unknown option: $1"
455 echo >&2 "Run $0 --help for usage."
456 exit 120
457 ;;
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000458 *) COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS $1";;
Gilles Peskine55f7c942019-01-09 22:28:21 +0100459 esac
460 shift
Gilles Peskine8f073122018-11-27 15:58:47 +0100461 done
SimonB2e23c822016-04-16 21:54:39 +0100462
Gilles Peskinea28db922019-01-10 00:05:18 +0100463 # With no list of components, run everything.
Gilles Peskine80ddb992021-08-06 11:51:59 +0200464 if [ -z "$COMMAND_LINE_COMPONENTS" ] && [ $restore_first -eq 0 ]; then
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000465 all_except=1
Andres AGdc192212016-08-31 17:33:13 +0100466 fi
467
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000468 # --no-armcc is a legacy option. The modern way is --except '*_armcc*'.
469 # Ignore it if components are listed explicitly on the command line.
Gilles Peskinea28db922019-01-10 00:05:18 +0100470 if [ -n "$no_armcc" ] && [ $all_except -eq 1 ]; then
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000471 COMMAND_LINE_COMPONENTS="$COMMAND_LINE_COMPONENTS *_armcc*"
SimonB2e23c822016-04-16 21:54:39 +0100472 fi
SimonB2e23c822016-04-16 21:54:39 +0100473
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200474 # Error out if an explicitly requested component doesn't exist.
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100475 if [ $all_except -eq 0 ]; then
476 unsupported=0
Gilles Peskine03af6782021-08-06 11:35:17 +0200477 # Temporarily disable wildcard expansion so that $COMMAND_LINE_COMPONENTS
478 # only does word splitting.
Gilles Peskine1d475b62021-08-03 13:43:36 +0200479 set -f
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100480 for component in $COMMAND_LINE_COMPONENTS; do
Gilles Peskine1d475b62021-08-03 13:43:36 +0200481 set +f
Gilles Peskinebf66e2c2021-08-03 13:44:28 +0200482 # If the requested name includes a wildcard character, don't
483 # check it. Accept wildcard patterns that don't match anything.
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100484 case $component in
485 *[*?\[]*) continue;;
486 esac
487 case " $SUPPORTED_COMPONENTS " in
488 *" $component "*) :;;
489 *)
490 echo >&2 "Component $component was explicitly requested, but is not known or not supported."
491 unsupported=$((unsupported + 1));;
492 esac
493 done
Gilles Peskine1d475b62021-08-03 13:43:36 +0200494 set +f
Gilles Peskineb80f0d22020-03-28 21:37:59 +0100495 if [ $unsupported -ne 0 ]; then
496 exit 2
497 fi
498 fi
499
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000500 # Build the list of components to run.
Gilles Peskinea28db922019-01-10 00:05:18 +0100501 RUN_COMPONENTS=
502 for component in $SUPPORTED_COMPONENTS; do
503 if is_component_included "$component"; [ $? -eq $all_except ]; then
504 RUN_COMPONENTS="$RUN_COMPONENTS $component"
505 fi
506 done
Gilles Peskinebeb3a812019-01-06 22:11:25 +0000507
508 unset all_except
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000509 unset no_armcc
Gilles Peskine8f073122018-11-27 15:58:47 +0100510}
SimonB2e23c822016-04-16 21:54:39 +0100511
Gilles Peskine8f073122018-11-27 15:58:47 +0100512pre_check_git () {
513 if [ $FORCE -eq 1 ]; then
Gilles Peskine53190e62019-01-09 23:17:35 +0100514 rm -rf "$OUT_OF_SOURCE_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +0100515 git checkout-index -f -q $CONFIG_H
516 cleanup
517 else
SimonB2e23c822016-04-16 21:54:39 +0100518
Gilles Peskine8f073122018-11-27 15:58:47 +0100519 if [ -d "$OUT_OF_SOURCE_DIR" ]; then
520 echo "Warning - there is an existing directory at '$OUT_OF_SOURCE_DIR'" >&2
521 echo "You can either delete this directory manually, or force the test by rerunning"
522 echo "the script as: $0 --force --out-of-source-dir $OUT_OF_SOURCE_DIR"
523 exit 1
524 fi
525
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200526 if ! git diff --quiet include/mbedtls/mbedtls_config.h; then
527 err_msg "Warning - the configuration file 'include/mbedtls/mbedtls_config.h' has been edited. "
Gilles Peskine8f073122018-11-27 15:58:47 +0100528 echo "You can either delete or preserve your work, or force the test by rerunning the"
529 echo "script as: $0 --force"
530 exit 1
531 fi
SimonB2e23c822016-04-16 21:54:39 +0100532 fi
Andrzej Kurekeb508712019-02-14 07:18:59 -0500533}
534
Gilles Peskine568f53a2021-07-12 18:16:01 +0200535pre_restore_files () {
536 # If the makefiles have been generated by a framework such as cmake,
537 # restore them from git. If the makefiles look like modifications from
538 # the ones checked into git, take care not to modify them. Whatever
539 # this function leaves behind is what the script will restore before
540 # each component.
541 case "$(head -n1 Makefile)" in
542 *[Gg]enerated*)
543 git update-index --no-skip-worktree Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile
544 git checkout -- Makefile library/Makefile programs/Makefile tests/Makefile programs/fuzz/Makefile
545 ;;
546 esac
547}
548
Gilles Peskinef83eb822020-03-30 20:11:39 +0200549pre_back_up () {
550 for x in $files_to_back_up; do
551 cp -p "$x" "$x$backup_suffix"
552 done
553}
554
Gilles Peskine8f073122018-11-27 15:58:47 +0100555pre_setup_keep_going () {
Gilles Peskinece266c42020-03-28 18:50:43 +0100556 failure_count=0 # Number of failed components
557 last_failure_status=0 # Last failure status in this component
558
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100559 # See err_trap
560 previous_failure_status=0
561 previous_failed_command=
562 previous_failure_funcall_depth=0
Gilles Peskinea681c592020-03-28 21:27:40 +0100563 unset report_failed_command
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100564
Gilles Peskine7c652162017-12-11 00:01:40 +0100565 start_red=
566 end_color=
567 if [ -t 1 ]; then
Gilles Peskine9736b9d2018-01-02 21:54:17 +0100568 case "${TERM:-}" in
Gilles Peskine7c652162017-12-11 00:01:40 +0100569 *color*|cygwin|linux|rxvt*|screen|[Eex]term*)
570 start_red=$(printf '\033[31m')
571 end_color=$(printf '\033[0m')
572 ;;
573 esac
574 fi
Gilles Peskinece266c42020-03-28 18:50:43 +0100575
576 # Keep a summary of failures in a file. We'll print it out at the end.
577 failure_summary_file=$PWD/all-sh-failures-$$.log
578 : >"$failure_summary_file"
579
580 # Whether it makes sense to keep a component going after the specified
581 # command fails (test command) or not (configure or build).
Gilles Peskine03af6782021-08-06 11:35:17 +0200582 # This function normally receives the failing simple command
583 # ($BASH_COMMAND) as an argument, but if $report_failed_command is set,
584 # this is passed instead.
Gilles Peskinece266c42020-03-28 18:50:43 +0100585 # This doesn't have to be 100% accurate: all failures are recorded anyway.
Gilles Peskinec111e242021-08-02 23:29:53 +0200586 # False positives result in running things that can't be expected to
587 # work. False negatives result in things not running after something else
588 # failed even though they might have given useful feedback.
Gilles Peskinece266c42020-03-28 18:50:43 +0100589 can_keep_going_after_failure () {
590 case "$1" in
591 "msg "*) false;;
Gilles Peskinec111e242021-08-02 23:29:53 +0200592 "cd "*) false;;
593 *make*[\ /]tests*) false;; # make tests, make CFLAGS=-I../tests, ...
594 *test*) true;; # make test, tests/stuff, env V=v tests/stuff, ...
595 *make*check*) true;;
596 "grep "*) true;;
597 "[ "*) true;;
598 "! "*) true;;
Gilles Peskinece266c42020-03-28 18:50:43 +0100599 *) false;;
Gilles Peskine7c652162017-12-11 00:01:40 +0100600 esac
601 }
Gilles Peskinece266c42020-03-28 18:50:43 +0100602
603 # This function runs if there is any error in a component.
604 # It must either exit with a nonzero status, or set
605 # last_failure_status to a nonzero value.
606 err_trap () {
607 # Save $? (status of the failing command). This must be the very
608 # first thing, before $? is overridden.
609 last_failure_status=$?
Gilles Peskinea681c592020-03-28 21:27:40 +0100610 failed_command=${report_failed_command-$BASH_COMMAND}
Gilles Peskinece266c42020-03-28 18:50:43 +0100611
Gilles Peskinefec30cb2020-03-28 19:34:23 +0100612 if [[ $last_failure_status -eq $previous_failure_status &&
613 "$failed_command" == "$previous_failed_command" &&
614 ${#FUNCNAME[@]} == $((previous_failure_funcall_depth - 1)) ]]
615 then
616 # The same command failed twice in a row, but this time one level
617 # less deep in the function call stack. This happens when the last
618 # command of a function returns a nonzero status, and the function
619 # returns that same status. Ignore the second failure.
620 previous_failure_funcall_depth=${#FUNCNAME[@]}
621 return
622 fi
623 previous_failure_status=$last_failure_status
624 previous_failed_command=$failed_command
625 previous_failure_funcall_depth=${#FUNCNAME[@]}
626
Gilles Peskinece266c42020-03-28 18:50:43 +0100627 text="$current_section: $failed_command -> $last_failure_status"
628 echo "${start_red}^^^^$text^^^^${end_color}" >&2
629 echo "$text" >>"$failure_summary_file"
630
631 # If the command is fatal (configure or build command), stop this
632 # component. Otherwise (test command) keep the component running
633 # (run more tests from the same build).
634 if ! can_keep_going_after_failure "$failed_command"; then
635 exit $last_failure_status
636 fi
637 }
638
Gilles Peskine7c652162017-12-11 00:01:40 +0100639 final_report () {
640 if [ $failure_count -gt 0 ]; then
641 echo
642 echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
Gilles Peskinece266c42020-03-28 18:50:43 +0100643 echo "${start_red}FAILED: $failure_count components${end_color}"
644 cat "$failure_summary_file"
Gilles Peskine7c652162017-12-11 00:01:40 +0100645 echo "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
646 elif [ -z "${1-}" ]; then
647 echo "SUCCESS :)"
648 fi
649 if [ -n "${1-}" ]; then
650 echo "Killed by SIG$1."
651 fi
Gilles Peskinece266c42020-03-28 18:50:43 +0100652 rm -f "$failure_summary_file"
653 if [ $failure_count -gt 0 ]; then
654 exit 1
655 fi
Gilles Peskine7c652162017-12-11 00:01:40 +0100656 }
Gilles Peskine8f073122018-11-27 15:58:47 +0100657}
658
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200659# record_status() and if_build_succeeded() are kept temporarily for backward
660# compatibility. Don't use them in new components.
Gilles Peskinece266c42020-03-28 18:50:43 +0100661record_status () {
662 "$@"
Gilles Peskine7c652162017-12-11 00:01:40 +0100663}
Gilles Peskine7c652162017-12-11 00:01:40 +0100664if_build_succeeded () {
Gilles Peskinece266c42020-03-28 18:50:43 +0100665 "$@"
Gilles Peskine7c652162017-12-11 00:01:40 +0100666}
667
Gilles Peskinea681c592020-03-28 21:27:40 +0100668# '! true' does not trigger the ERR trap. Arrange to trigger it, with
669# a reasonably informative error message (not just "$@").
670not () {
671 if "$@"; then
672 report_failed_command="! $*"
673 false
674 unset report_failed_command
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200675 fi
676}
677
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200678pre_prepare_outcome_file () {
679 case "$MBEDTLS_TEST_OUTCOME_FILE" in
680 [!/]*) MBEDTLS_TEST_OUTCOME_FILE="$PWD/$MBEDTLS_TEST_OUTCOME_FILE";;
681 esac
682 if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ] && [ "$append_outcome" -eq 0 ]; then
683 rm -f "$MBEDTLS_TEST_OUTCOME_FILE"
684 fi
685}
686
Gilles Peskine8f073122018-11-27 15:58:47 +0100687pre_print_configuration () {
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200688 if [ $QUIET -eq 1 ]; then
689 return
690 fi
691
Gilles Peskine8f073122018-11-27 15:58:47 +0100692 msg "info: $0 configuration"
693 echo "MEMORY: $MEMORY"
694 echo "FORCE: $FORCE"
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200695 echo "MBEDTLS_TEST_OUTCOME_FILE: ${MBEDTLS_TEST_OUTCOME_FILE:-(none)}"
Gilles Peskine8f073122018-11-27 15:58:47 +0100696 echo "SEED: ${SEED-"UNSET"}"
Gilles Peskine636c26a2020-03-04 20:46:15 +0100697 echo
Gilles Peskine8f073122018-11-27 15:58:47 +0100698 echo "OPENSSL: $OPENSSL"
699 echo "OPENSSL_LEGACY: $OPENSSL_LEGACY"
700 echo "OPENSSL_NEXT: $OPENSSL_NEXT"
701 echo "GNUTLS_CLI: $GNUTLS_CLI"
702 echo "GNUTLS_SERV: $GNUTLS_SERV"
703 echo "GNUTLS_LEGACY_CLI: $GNUTLS_LEGACY_CLI"
704 echo "GNUTLS_LEGACY_SERV: $GNUTLS_LEGACY_SERV"
705 echo "ARMC5_BIN_DIR: $ARMC5_BIN_DIR"
706 echo "ARMC6_BIN_DIR: $ARMC6_BIN_DIR"
707}
Andres AG7770ea82016-10-10 15:46:20 +0100708
Andres AGd9eba4b2016-08-26 14:42:14 +0100709# Make sure the tools we need are available.
Gilles Peskine8f073122018-11-27 15:58:47 +0100710pre_check_tools () {
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000711 # Build the list of variables to pass to output_env.sh.
712 set env
SimonB2e23c822016-04-16 21:54:39 +0100713
Gilles Peskine87964262019-01-06 22:40:00 +0000714 case " $RUN_COMPONENTS " in
715 # Require OpenSSL and GnuTLS if running any tests (as opposed to
716 # only doing builds). Not all tests run OpenSSL and GnuTLS, but this
717 # is a good enough approximation in practice.
718 *" test_"*)
719 # To avoid setting OpenSSL and GnuTLS for each call to compat.sh
720 # and ssl-opt.sh, we just export the variables they require.
721 export OPENSSL_CMD="$OPENSSL"
722 export GNUTLS_CLI="$GNUTLS_CLI"
723 export GNUTLS_SERV="$GNUTLS_SERV"
724 # Avoid passing --seed flag in every call to ssl-opt.sh
725 if [ -n "${SEED-}" ]; then
726 export SEED
727 fi
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000728 set "$@" OPENSSL="$OPENSSL" OPENSSL_LEGACY="$OPENSSL_LEGACY"
729 set "$@" GNUTLS_CLI="$GNUTLS_CLI" GNUTLS_SERV="$GNUTLS_SERV"
730 set "$@" GNUTLS_LEGACY_CLI="$GNUTLS_LEGACY_CLI"
731 set "$@" GNUTLS_LEGACY_SERV="$GNUTLS_LEGACY_SERV"
Gilles Peskine87964262019-01-06 22:40:00 +0000732 check_tools "$OPENSSL" "$OPENSSL_LEGACY" "$OPENSSL_NEXT" \
733 "$GNUTLS_CLI" "$GNUTLS_SERV" \
734 "$GNUTLS_LEGACY_CLI" "$GNUTLS_LEGACY_SERV"
735 ;;
736 esac
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200737
Gilles Peskine87964262019-01-06 22:40:00 +0000738 case " $RUN_COMPONENTS " in
739 *_doxygen[_\ ]*) check_tools "doxygen" "dot";;
740 esac
Andres AGd9eba4b2016-08-26 14:42:14 +0100741
Gilles Peskine87964262019-01-06 22:40:00 +0000742 case " $RUN_COMPONENTS " in
Gilles Peskine6d061342020-04-30 18:19:32 +0200743 *_arm_none_eabi_gcc[_\ ]*) check_tools "${ARM_NONE_EABI_GCC_PREFIX}gcc";;
Gilles Peskine87964262019-01-06 22:40:00 +0000744 esac
Andres AGd9eba4b2016-08-26 14:42:14 +0100745
Gilles Peskine87964262019-01-06 22:40:00 +0000746 case " $RUN_COMPONENTS " in
747 *_mingw[_\ ]*) check_tools "i686-w64-mingw32-gcc";;
748 esac
749
750 case " $RUN_COMPONENTS " in
751 *" test_zeroize "*) check_tools "gdb";;
752 esac
753
754 case " $RUN_COMPONENTS " in
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000755 *_armcc*)
Gilles Peskine87964262019-01-06 22:40:00 +0000756 ARMC5_CC="$ARMC5_BIN_DIR/armcc"
757 ARMC5_AR="$ARMC5_BIN_DIR/armar"
Gilles Peskine18487f62020-04-30 23:11:54 +0200758 ARMC5_FROMELF="$ARMC5_BIN_DIR/fromelf"
Gilles Peskine87964262019-01-06 22:40:00 +0000759 ARMC6_CC="$ARMC6_BIN_DIR/armclang"
760 ARMC6_AR="$ARMC6_BIN_DIR/armar"
Gilles Peskine18487f62020-04-30 23:11:54 +0200761 ARMC6_FROMELF="$ARMC6_BIN_DIR/fromelf"
762 check_tools "$ARMC5_CC" "$ARMC5_AR" "$ARMC5_FROMELF" \
763 "$ARMC6_CC" "$ARMC6_AR" "$ARMC6_FROMELF";;
Gilles Peskine5331c6e2019-01-06 22:23:42 +0000764 esac
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000765
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +0200766 # past this point, no call to check_tool, only printing output
767 if [ $QUIET -eq 1 ]; then
768 return
769 fi
770
Gilles Peskinecc9f0b92019-01-06 22:46:21 +0000771 msg "info: output_env.sh"
772 case $RUN_COMPONENTS in
773 *_armcc*)
774 set "$@" ARMC5_CC="$ARMC5_CC" ARMC6_CC="$ARMC6_CC" RUN_ARMCC=1;;
775 *) set "$@" RUN_ARMCC=0;;
776 esac
777 "$@" scripts/output_env.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100778}
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +0100779
Gilles Peskine1570b592021-04-22 01:10:12 +0200780pre_generate_files() {
Manuel Pégourié-Gonnard87db8a22021-06-18 13:30:14 +0200781 # since make doesn't have proper dependencies, remove any possibly outdate
782 # file that might be around before generating fresh ones
783 make neat
Gilles Peskine72385032021-07-08 19:07:07 +0200784 if [ $QUIET -eq 1 ]; then
Gilles Peskine75301632021-08-05 15:10:47 +0200785 make generated_files >/dev/null
Gilles Peskine72385032021-07-08 19:07:07 +0200786 else
787 make generated_files
788 fi
Gilles Peskine1570b592021-04-22 01:10:12 +0200789}
790
Gilles Peskine192c72f2017-12-21 15:59:21 +0100791
792
793################################################################
794#### Basic checks
795################################################################
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +0100796
797#
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200798# Test Suites to be executed
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100799#
Manuel Pégourié-Gonnard3d404b42015-07-08 21:59:16 +0100800# The test ordering tries to optimize for the following criteria:
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200801# 1. Catch possible problems early, by running first tests that run quickly
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100802# and/or are more likely to fail than others (eg I use Clang most of the
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200803# time, so start with a GCC build).
804# 2. Minimize total running time, by avoiding useless rebuilds
Manuel Pégourié-Gonnard89d69b32014-11-20 13:48:53 +0100805#
Manuel Pégourié-Gonnard259b08a2016-01-08 16:27:41 +0100806# Indicative running times are given for reference.
807
Gilles Peskine8f073122018-11-27 15:58:47 +0100808component_check_recursion () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200809 msg "Check: recursion.pl" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200810 tests/scripts/recursion.pl library/*.c
Gilles Peskine8f073122018-11-27 15:58:47 +0100811}
Janos Follathb72c6782016-07-19 14:54:17 +0100812
Gilles Peskine67debb62021-05-18 16:09:50 +0200813component_check_generated_files () {
814 msg "Check: check-generated-files, files generated with make" # 2s
815 make generated_files
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200816 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200817
818 msg "Check: check-generated-files -u, files present" # 2s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200819 tests/scripts/check-generated-files.sh -u
Gilles Peskine67debb62021-05-18 16:09:50 +0200820 # Check that the generated files are considered up to date.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200821 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200822
823 msg "Check: check-generated-files -u, files absent" # 2s
824 command make neat
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200825 tests/scripts/check-generated-files.sh -u
Gilles Peskine67debb62021-05-18 16:09:50 +0200826 # Check that the generated files are considered up to date.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200827 tests/scripts/check-generated-files.sh
Gilles Peskine67debb62021-05-18 16:09:50 +0200828
829 # This component ends with the generated files present in the source tree.
830 # This is necessary for subsequent components!
831}
832
Gilles Peskine8f073122018-11-27 15:58:47 +0100833component_check_doxy_blocks () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200834 msg "Check: doxygen markup outside doxygen blocks" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200835 tests/scripts/check-doxy-blocks.pl
Gilles Peskine8f073122018-11-27 15:58:47 +0100836}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200837
Gilles Peskine8f073122018-11-27 15:58:47 +0100838component_check_files () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200839 msg "Check: file sanity checks (permissions, encodings)" # < 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200840 tests/scripts/check_files.py
Gilles Peskine8f073122018-11-27 15:58:47 +0100841}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200842
Gilles Peskine30e0bb42020-05-10 17:40:49 +0200843component_check_changelog () {
844 msg "Check: changelog entries" # < 1s
845 rm -f ChangeLog.new
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200846 scripts/assemble_changelog.py -o ChangeLog.new
Gilles Peskine30e0bb42020-05-10 17:40:49 +0200847 if [ -e ChangeLog.new ]; then
848 # Show the diff for information. It isn't an error if the diff is
849 # non-empty.
850 diff -u ChangeLog ChangeLog.new || true
851 rm ChangeLog.new
852 fi
853}
854
Gilles Peskine8f073122018-11-27 15:58:47 +0100855component_check_names () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200856 msg "Check: declared and exported names (builds the library)" # < 3s
Yuto Takanoc3a6f632021-09-24 18:02:56 +0100857 tests/scripts/check_names.py -v
Gilles Peskine8f073122018-11-27 15:58:47 +0100858}
Darryl Greena07039c2018-03-13 16:48:16 +0000859
Gilles Peskine895868b2019-09-19 21:30:05 +0200860component_check_test_cases () {
861 msg "Check: test case descriptions" # < 1s
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +0200862 if [ $QUIET -eq 1 ]; then
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +0200863 opt='--quiet'
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +0200864 else
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +0200865 opt=''
Manuel Pégourié-Gonnarda9119162020-06-02 11:51:40 +0200866 fi
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200867 tests/scripts/check_test_cases.py $opt
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +0200868 unset opt
Neil Armstrong882e02e2022-04-22 16:50:29 +0200869
870 # Check if some test are explicitely disabled when USE_PSA_CRYPTO is set
871 not grep -n -R 'depends_on.*!MBEDTLS_USE_PSA_CRYPTO' tests/suites/*.function tests/suites/*.data
872 not grep -n -R '^ *requires_config_disabled.*MBEDTLS_USE_PSA_CRYPTO' tests/ssl-opt.sh tests/opt-testcases/*.sh
Gilles Peskine895868b2019-09-19 21:30:05 +0200873}
874
Gilles Peskine8f073122018-11-27 15:58:47 +0100875component_check_doxygen_warnings () {
Gilles Peskine600bb692019-09-19 21:29:11 +0200876 msg "Check: doxygen warnings (builds the documentation)" # ~ 3s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200877 tests/scripts/doxygen.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100878}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200879
Gilles Peskine192c72f2017-12-21 15:59:21 +0100880
Gilles Peskine636c26a2020-03-04 20:46:15 +0100881
Gilles Peskine192c72f2017-12-21 15:59:21 +0100882################################################################
883#### Build and test many configurations and targets
884################################################################
885
Gilles Peskine7832c9f2019-04-08 17:00:15 +0200886component_test_default_out_of_box () {
887 msg "build: make, default config (out-of-box)" # ~1min
888 make
Gilles Peskine67ffdaf2019-09-16 15:55:46 +0200889 # Disable fancy stuff
890 unset MBEDTLS_TEST_OUTCOME_FILE
Gilles Peskine7832c9f2019-04-08 17:00:15 +0200891
892 msg "test: main suites make, default config (out-of-box)" # ~10s
893 make test
894
895 msg "selftest: make, default config (out-of-box)" # ~10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200896 programs/test/selftest
Gilles Peskine7832c9f2019-04-08 17:00:15 +0200897}
898
Gilles Peskine8f073122018-11-27 15:58:47 +0100899component_test_default_cmake_gcc_asan () {
900 msg "build: cmake, gcc, ASan" # ~ 1 min 50s
Gilles Peskine8f073122018-11-27 15:58:47 +0100901 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
902 make
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200903
Gilles Peskine8f073122018-11-27 15:58:47 +0100904 msg "test: main suites (inc. selftests) (ASan build)" # ~ 50s
905 make test
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200906
Gilles Peskine97bea012020-04-23 23:37:45 +0200907 msg "test: selftest (ASan build)" # ~ 10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200908 programs/test/selftest
Gilles Peskine97bea012020-04-23 23:37:45 +0200909
Gilles Peskine8f073122018-11-27 15:58:47 +0100910 msg "test: ssl-opt.sh (ASan build)" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200911 tests/ssl-opt.sh
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200912
Gilles Peskine8f073122018-11-27 15:58:47 +0100913 msg "test: compat.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200914 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +0200915
916 msg "test: context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200917 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +0100918}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +0200919
Hanno Becker01635512019-02-26 14:27:09 +0000920component_test_full_cmake_gcc_asan () {
921 msg "build: full config, cmake, gcc, ASan"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +0200922 scripts/config.py full
Hanno Becker01635512019-02-26 14:27:09 +0000923 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
924 make
925
926 msg "test: main suites (inc. selftests) (full config, ASan build)"
927 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +0100928
Gilles Peskine97bea012020-04-23 23:37:45 +0200929 msg "test: selftest (ASan build)" # ~ 10s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200930 programs/test/selftest
Gilles Peskine97bea012020-04-23 23:37:45 +0200931
Gilles Peskine636c26a2020-03-04 20:46:15 +0100932 msg "test: ssl-opt.sh (full config, ASan build)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200933 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +0100934
935 msg "test: compat.sh (full config, ASan build)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200936 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +0200937
938 msg "test: context-info.sh (full config, ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200939 tests/context-info.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +0100940}
941
Ronald Cronc3623db2020-10-29 10:51:32 +0100942component_test_psa_crypto_key_id_encodes_owner () {
Andrzej Kurek03e01462022-01-03 12:53:24 +0100943 msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
Ronald Cronc3623db2020-10-29 10:51:32 +0100944 scripts/config.py full
Ronald Cronc3623db2020-10-29 10:51:32 +0100945 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
946 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
947 make
948
949 msg "test: full config - USE_PSA_CRYPTO + PSA_CRYPTO_KEY_ID_ENCODES_OWNER, cmake, gcc, ASan"
950 make test
951}
952
Gilles Peskinea3548672021-06-17 11:37:52 +0200953# check_renamed_symbols HEADER LIB
954# Check that if HEADER contains '#define MACRO ...' then MACRO is not a symbol
955# name is LIB.
956check_renamed_symbols () {
957 ! nm "$2" | sed 's/.* //' |
958 grep -x -F "$(sed -n 's/^ *# *define *\([A-Z_a-z][0-9A-Z_a-z]*\)..*/\1/p' "$1")"
959}
960
Gilles Peskined1dcfd52021-06-15 18:37:38 +0200961component_build_psa_crypto_spm () {
Andrzej Kurek03e01462022-01-03 12:53:24 +0100962 msg "build: full config + PSA_CRYPTO_KEY_ID_ENCODES_OWNER + PSA_CRYPTO_SPM, make, gcc"
Gilles Peskined1dcfd52021-06-15 18:37:38 +0200963 scripts/config.py full
Gilles Peskined1dcfd52021-06-15 18:37:38 +0200964 scripts/config.py unset MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS
965 scripts/config.py set MBEDTLS_PSA_CRYPTO_KEY_ID_ENCODES_OWNER
966 scripts/config.py set MBEDTLS_PSA_CRYPTO_SPM
967 # We can only compile, not link, since our test and sample programs
968 # aren't equipped for the modified names used when MBEDTLS_PSA_CRYPTO_SPM
969 # is active.
970 make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/spe' lib
Gilles Peskinea3548672021-06-17 11:37:52 +0200971
972 # Check that if a symbol is renamed by crypto_spe.h, the non-renamed
973 # version is not present.
974 echo "Checking for renamed symbols in the library"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +0200975 check_renamed_symbols tests/include/spe/crypto_spe.h library/libmbedcrypto.a
Gilles Peskined1dcfd52021-06-15 18:37:38 +0200976}
977
Ronald Cron336678b2021-01-28 17:54:24 +0100978component_test_psa_crypto_client () {
979 msg "build: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make"
980 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
981 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
982 scripts/config.py set MBEDTLS_PSA_CRYPTO_CLIENT
983 make
984
985 msg "test: default config - PSA_CRYPTO_C + PSA_CRYPTO_CLIENT, make"
986 make test
987}
988
Jaeden Amero424fa932021-05-14 08:34:32 +0100989component_test_psa_crypto_rsa_no_genprime() {
990 msg "build: default config minus MBEDTLS_GENPRIME"
991 scripts/config.py unset MBEDTLS_GENPRIME
992 make
993
994 msg "test: default config minus MBEDTLS_GENPRIME"
995 make test
996}
997
Gilles Peskine782f4112018-11-27 16:11:09 +0100998component_test_ref_configs () {
999 msg "test/build: ref-configs (ASan build)" # ~ 6 min 20s
Manuel Pégourié-Gonnard9327fb32021-09-09 11:46:25 +02001000 # test-ref-configs works by overwriting mbedtls_config.h; this makes cmake
1001 # want to re-generate generated files that depend on it, quite correctly.
1002 # However this doesn't work as the generation script expects a specific
1003 # format for mbedtls_config.h, which the other files don't follow. Also,
1004 # cmake can't know this, but re-generation is actually not necessary as
David Horstmannd64f4b22021-10-20 12:29:47 +01001005 # the generated files only depend on the list of available options, not
Manuel Pégourié-Gonnard9327fb32021-09-09 11:46:25 +02001006 # whether they're on or off. So, disable cmake's (over-sensitive here)
1007 # dependency resolution for generated files and just rely on them being
David Horstmanna8d14062021-10-20 17:14:23 +01001008 # present (thanks to pre_generate_files) by turning GEN_FILES off.
1009 CC=gcc cmake -D GEN_FILES=Off -D CMAKE_BUILD_TYPE:String=Asan .
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001010 tests/scripts/test-ref-configs.pl
Gilles Peskine782f4112018-11-27 16:11:09 +01001011}
Manuel Pégourié-Gonnard57255b12014-06-09 11:21:49 +02001012
Gilles Peskine8f073122018-11-27 15:58:47 +01001013component_test_no_renegotiation () {
1014 msg "build: Default + !MBEDTLS_SSL_RENEGOTIATION (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001015 scripts/config.py unset MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine8f073122018-11-27 15:58:47 +01001016 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1017 make
Simon Butcher3ea7f522016-03-07 23:22:10 +00001018
Gilles Peskine8f073122018-11-27 15:58:47 +01001019 msg "test: !MBEDTLS_SSL_RENEGOTIATION - main suites (inc. selftests) (ASan build)" # ~ 50s
1020 make test
Hanno Becker134c2ab2017-10-12 15:29:50 +01001021
Gilles Peskine8f073122018-11-27 15:58:47 +01001022 msg "test: !MBEDTLS_SSL_RENEGOTIATION - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001023 tests/ssl-opt.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001024}
Hanno Becker134c2ab2017-10-12 15:29:50 +01001025
Gilles Peskine636c26a2020-03-04 20:46:15 +01001026component_test_no_pem_no_fs () {
1027 msg "build: Default + !MBEDTLS_PEM_PARSE_C + !MBEDTLS_FS_IO (ASan build)"
1028 scripts/config.py unset MBEDTLS_PEM_PARSE_C
1029 scripts/config.py unset MBEDTLS_FS_IO
1030 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C # requires a filesystem
1031 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C # requires PSA ITS
1032 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1033 make
1034
1035 msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - main suites (inc. selftests) (ASan build)" # ~ 50s
1036 make test
1037
1038 msg "test: !MBEDTLS_PEM_PARSE_C !MBEDTLS_FS_IO - ssl-opt.sh (ASan build)" # ~ 6 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001039 tests/ssl-opt.sh
Gilles Peskine636c26a2020-03-04 20:46:15 +01001040}
1041
Gilles Peskine8f073122018-11-27 15:58:47 +01001042component_test_rsa_no_crt () {
1043 msg "build: Default + RSA_NO_CRT (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001044 scripts/config.py set MBEDTLS_RSA_NO_CRT
Gilles Peskine8f073122018-11-27 15:58:47 +01001045 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1046 make
Manuel Pégourié-Gonnard246978d2014-11-20 13:29:53 +01001047
Gilles Peskine8f073122018-11-27 15:58:47 +01001048 msg "test: RSA_NO_CRT - main suites (inc. selftests) (ASan build)" # ~ 50s
1049 make test
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001050
Gilles Peskine8f073122018-11-27 15:58:47 +01001051 msg "test: RSA_NO_CRT - RSA-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001052 tests/ssl-opt.sh -f RSA
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001053
Gilles Peskine8f073122018-11-27 15:58:47 +01001054 msg "test: RSA_NO_CRT - RSA-related part of compat.sh (ASan build)" # ~ 3 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001055 tests/compat.sh -t RSA
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02001056
1057 msg "test: RSA_NO_CRT - RSA-related part of context-info.sh (ASan build)" # ~ 15 sec
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001058 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01001059}
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001060
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001061component_test_no_ctr_drbg_classic () {
1062 msg "build: Full minus CTR_DRBG, classic crypto in TLS"
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001063 scripts/config.py full
1064 scripts/config.py unset MBEDTLS_CTR_DRBG_C
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001065 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001066 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001067
1068 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1069 make
1070
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001071 msg "test: Full minus CTR_DRBG, classic crypto - main suites"
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001072 make test
1073
Gilles Peskineba749042021-01-13 20:02:03 +01001074 # In this configuration, the TLS test programs use HMAC_DRBG.
1075 # The SSL tests are slow, so run a small subset, just enough to get
1076 # confidence that the SSL code copes with HMAC_DRBG.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001077 msg "test: Full minus CTR_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001078 tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server'
Gilles Peskineba749042021-01-13 20:02:03 +01001079
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001080 msg "test: Full minus CTR_DRBG, classic crypto - compat.sh (subset)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001081 tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001082}
1083
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001084component_test_no_ctr_drbg_use_psa () {
1085 msg "build: Full minus CTR_DRBG, PSA crypto in TLS"
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001086 scripts/config.py full
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001087 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1088 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001089
1090 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1091 make
1092
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001093 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - main suites"
1094 make test
1095
1096 # In this configuration, the TLS test programs use HMAC_DRBG.
1097 # The SSL tests are slow, so run a small subset, just enough to get
1098 # confidence that the SSL code copes with HMAC_DRBG.
1099 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001100 tests/ssl-opt.sh -f 'Default\|SSL async private.*delay=\|tickets enabled on server'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001101
1102 msg "test: Full minus CTR_DRBG, USE_PSA_CRYPTO - compat.sh (subset)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001103 tests/compat.sh -m tls12 -t 'ECDSA PSK' -V NO -p OpenSSL
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001104}
1105
1106component_test_no_hmac_drbg_classic () {
1107 msg "build: Full minus HMAC_DRBG, classic crypto in TLS"
1108 scripts/config.py full
1109 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1110 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1111 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001112 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001113
1114 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1115 make
1116
1117 msg "test: Full minus HMAC_DRBG, classic crypto - main suites"
Manuel Pégourié-Gonnard5b942dc2020-06-05 09:29:51 +02001118 make test
1119
Gilles Peskinea2224342020-11-19 22:14:34 +01001120 # Normally our ECDSA implementation uses deterministic ECDSA. But since
1121 # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used
1122 # instead.
1123 # Test SSL with non-deterministic ECDSA. Only test features that
1124 # might be affected by how ECDSA signature is performed.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001125 msg "test: Full minus HMAC_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001126 tests/ssl-opt.sh -f 'Default\|SSL async private: sign'
Gilles Peskinea2224342020-11-19 22:14:34 +01001127
1128 # To save time, only test one protocol version, since this part of
1129 # the protocol is identical in (D)TLS up to 1.2.
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001130 msg "test: Full minus HMAC_DRBG, classic crypto - compat.sh (ECDSA)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001131 tests/compat.sh -m tls12 -t 'ECDSA'
Manuel Pégourié-Gonnard817e3682020-05-28 12:55:10 +02001132}
1133
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001134component_test_no_hmac_drbg_use_psa () {
1135 msg "build: Full minus HMAC_DRBG, PSA crypto in TLS"
1136 scripts/config.py full
1137 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1138 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
1139 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1140
1141 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1142 make
1143
1144 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - main suites"
1145 make test
1146
1147 # Normally our ECDSA implementation uses deterministic ECDSA. But since
1148 # HMAC_DRBG is disabled in this configuration, randomized ECDSA is used
1149 # instead.
1150 # Test SSL with non-deterministic ECDSA. Only test features that
1151 # might be affected by how ECDSA signature is performed.
1152 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001153 tests/ssl-opt.sh -f 'Default\|SSL async private: sign'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001154
1155 # To save time, only test one protocol version, since this part of
1156 # the protocol is identical in (D)TLS up to 1.2.
1157 msg "test: Full minus HMAC_DRBG, USE_PSA_CRYPTO - compat.sh (ECDSA)"
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001158 tests/compat.sh -m tls12 -t 'ECDSA'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001159}
1160
1161component_test_psa_external_rng_no_drbg_classic () {
1162 msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto in TLS"
1163 scripts/config.py full
1164 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001165 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001166 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
Gilles Peskine38c12fd2021-02-08 21:02:53 +01001167 scripts/config.py unset MBEDTLS_ENTROPY_C
1168 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1169 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001170 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1171 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1172 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
Gilles Peskine8eb29432021-02-03 20:07:11 +01001173 # When MBEDTLS_USE_PSA_CRYPTO is disabled and there is no DRBG,
1174 # the SSL test programs don't have an RNG and can't work. Explicitly
1175 # make them use the PSA RNG with -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG.
1176 make CFLAGS="$ASAN_CFLAGS -O2 -DMBEDTLS_TEST_USE_PSA_CRYPTO_RNG" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001177
1178 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - main suites"
1179 make test
1180
Gilles Peskine8eb29432021-02-03 20:07:11 +01001181 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, classic crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001182 tests/ssl-opt.sh -f 'Default'
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001183}
1184
1185component_test_psa_external_rng_no_drbg_use_psa () {
1186 msg "build: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto in TLS"
Gilles Peskinec109b372020-11-23 17:39:04 +01001187 scripts/config.py full
1188 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
Gilles Peskine38c12fd2021-02-08 21:02:53 +01001189 scripts/config.py unset MBEDTLS_ENTROPY_C
1190 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
1191 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskinec109b372020-11-23 17:39:04 +01001192 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1193 scripts/config.py unset MBEDTLS_HMAC_DRBG_C
1194 scripts/config.py unset MBEDTLS_ECDSA_DETERMINISTIC # requires HMAC_DRBG
Gilles Peskinec109b372020-11-23 17:39:04 +01001195 make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1196
Gilles Peskine2747d7d2021-02-03 14:56:51 +01001197 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - main suites"
Gilles Peskinec109b372020-11-23 17:39:04 +01001198 make test
1199
Gilles Peskine8eb29432021-02-03 20:07:11 +01001200 msg "test: PSA_CRYPTO_EXTERNAL_RNG minus *_DRBG, PSA crypto - ssl-opt.sh (subset)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001201 tests/ssl-opt.sh -f 'Default\|opaque'
Gilles Peskinec109b372020-11-23 17:39:04 +01001202}
1203
1204component_test_psa_external_rng_use_psa_crypto () {
1205 msg "build: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1206 scripts/config.py full
1207 scripts/config.py set MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG
1208 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
1209 scripts/config.py unset MBEDTLS_CTR_DRBG_C
1210 make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1211
1212 msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
1213 make test
1214
Gilles Peskineba749042021-01-13 20:02:03 +01001215 msg "test: full + PSA_CRYPTO_EXTERNAL_RNG + USE_PSA_CRYPTO minus CTR_DRBG"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001216 tests/ssl-opt.sh -f 'Default\|opaque'
Gilles Peskinec109b372020-11-23 17:39:04 +01001217}
1218
Gilles Peskine636c26a2020-03-04 20:46:15 +01001219component_test_everest () {
1220 msg "build: Everest ECDH context (ASan build)" # ~ 6 min
Gilles Peskine636c26a2020-03-04 20:46:15 +01001221 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
1222 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Asan .
1223 make
1224
1225 msg "test: Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
1226 make test
1227
1228 msg "test: Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001229 tests/ssl-opt.sh -f ECDH
Gilles Peskine636c26a2020-03-04 20:46:15 +01001230
1231 msg "test: Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
1232 # Exclude some symmetric ciphers that are redundant here to gain time.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001233 tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA\|DES'
Gilles Peskine636c26a2020-03-04 20:46:15 +01001234}
1235
Gilles Peskined3beca92020-07-03 00:15:37 +02001236component_test_everest_curve25519_only () {
1237 msg "build: Everest ECDH context, only Curve25519" # ~ 6 min
Gilles Peskined3beca92020-07-03 00:15:37 +02001238 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
1239 scripts/config.py unset MBEDTLS_ECDSA_C
1240 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1241 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
TRodziewicz7c1d41d2021-04-23 13:33:44 +02001242 scripts/config.py unset MBEDTLS_ECJPAKE_C
Gilles Peskined3beca92020-07-03 00:15:37 +02001243 # Disable all curves
1244 for c in $(sed -n 's/#define \(MBEDTLS_ECP_DP_[0-9A-Z_a-z]*_ENABLED\).*/\1/p' <"$CONFIG_H"); do
1245 scripts/config.py unset "$c"
1246 done
1247 scripts/config.py set MBEDTLS_ECP_DP_CURVE25519_ENABLED
1248
1249 make CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1250
1251 msg "test: Everest ECDH context, only Curve25519" # ~ 50s
1252 make test
1253}
1254
Gilles Peskine8f073122018-11-27 15:58:47 +01001255component_test_small_ssl_out_content_len () {
1256 msg "build: small SSL_OUT_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001257 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
1258 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
Gilles Peskine8f073122018-11-27 15:58:47 +01001259 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1260 make
Hanno Beckerd5ba5ef2017-09-28 12:53:51 +01001261
Gilles Peskine8f073122018-11-27 15:58:47 +01001262 msg "test: small SSL_OUT_CONTENT_LEN - ssl-opt.sh MFL and large packet tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001263 tests/ssl-opt.sh -f "Max fragment\|Large packet"
Gilles Peskine8f073122018-11-27 15:58:47 +01001264}
Angus Grattonc4dd0732018-04-11 16:28:39 +10001265
Gilles Peskine8f073122018-11-27 15:58:47 +01001266component_test_small_ssl_in_content_len () {
1267 msg "build: small SSL_IN_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001268 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 4096
1269 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 16384
Gilles Peskine8f073122018-11-27 15:58:47 +01001270 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1271 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10001272
Gilles Peskine8f073122018-11-27 15:58:47 +01001273 msg "test: small SSL_IN_CONTENT_LEN - ssl-opt.sh MFL tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001274 tests/ssl-opt.sh -f "Max fragment"
Gilles Peskine8f073122018-11-27 15:58:47 +01001275}
Angus Grattonc4dd0732018-04-11 16:28:39 +10001276
Gilles Peskine8f073122018-11-27 15:58:47 +01001277component_test_small_ssl_dtls_max_buffering () {
1278 msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001279 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 1000
Gilles Peskine8f073122018-11-27 15:58:47 +01001280 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1281 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10001282
Gilles Peskine8f073122018-11-27 15:58:47 +01001283 msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #0 - ssl-opt.sh specific reordering test"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001284 tests/ssl-opt.sh -f "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg"
Gilles Peskine8f073122018-11-27 15:58:47 +01001285}
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001286
Gilles Peskine8f073122018-11-27 15:58:47 +01001287component_test_small_mbedtls_ssl_dtls_max_buffering () {
1288 msg "build: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1"
Gilles Peskine636c26a2020-03-04 20:46:15 +01001289 scripts/config.py set MBEDTLS_SSL_DTLS_MAX_BUFFERING 190
Gilles Peskine8f073122018-11-27 15:58:47 +01001290 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
1291 make
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001292
Gilles Peskine8f073122018-11-27 15:58:47 +01001293 msg "test: small MBEDTLS_SSL_DTLS_MAX_BUFFERING #1 - ssl-opt.sh specific reordering test"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001294 tests/ssl-opt.sh -f "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket"
Gilles Peskine8f073122018-11-27 15:58:47 +01001295}
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001296
Gilles Peskine75cc7712019-09-06 19:47:17 +02001297component_test_psa_collect_statuses () {
1298 msg "build+test: psa_collect_statuses" # ~30s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02001299 scripts/config.py full
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001300 tests/scripts/psa_collect_statuses.py
Gilles Peskine75cc7712019-09-06 19:47:17 +02001301 # Check that psa_crypto_init() succeeded at least once
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001302 grep -q '^0:psa_crypto_init:' tests/statuses.log
Gilles Peskine75cc7712019-09-06 19:47:17 +02001303 rm -f tests/statuses.log
1304}
1305
Gilles Peskine8f073122018-11-27 15:58:47 +01001306component_test_full_cmake_clang () {
1307 msg "build: cmake, full config, clang" # ~ 50s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001308 scripts/config.py full
Gilles Peskinedbf7b7e2021-10-07 19:34:57 +02001309 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release -D ENABLE_TESTING=On .
Gilles Peskine8f073122018-11-27 15:58:47 +01001310 make
Hanno Becker2f5aa4c2018-08-24 14:43:44 +01001311
k-stachowiak0291cb72019-06-26 15:52:12 +02001312 msg "test: main suites (full config, clang)" # ~ 5s
Gilles Peskine8f073122018-11-27 15:58:47 +01001313 make test
Manuel Pégourié-Gonnard3895f5a2014-03-27 14:44:04 +01001314
k-stachowiak0291cb72019-06-26 15:52:12 +02001315 msg "test: psa_constant_names (full config, clang)" # ~ 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001316 tests/scripts/test_psa_constant_names.py
Gilles Peskine69e8f7f2020-02-26 19:51:43 +01001317
Gilles Peskine8f073122018-11-27 15:58:47 +01001318 msg "test: ssl-opt.sh default, ECJPAKE, SSL async (full config)" # ~ 1s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001319 tests/ssl-opt.sh -f 'Default\|ECJPAKE\|SSL async private'
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001320
TRodziewicz10e8cf52021-05-31 17:58:57 +02001321 msg "test: compat.sh DES, 3DES & NULL (full config)" # ~ 2 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001322 env OPENSSL_CMD="$OPENSSL_LEGACY" GNUTLS_CLI="$GNUTLS_LEGACY_CLI" GNUTLS_SERV="$GNUTLS_LEGACY_SERV" tests/compat.sh -e '^$' -f 'NULL\|DES'
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001323
Gilles Peskine8f073122018-11-27 15:58:47 +01001324 msg "test: compat.sh ARIA + ChachaPoly"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001325 env OPENSSL_CMD="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA'
Gilles Peskine8f073122018-11-27 15:58:47 +01001326}
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001327
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02001328component_test_memsan_constant_flow () {
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02001329 # This tests both (1) accesses to undefined memory, and (2) branches or
1330 # memory access depending on secret values. To distinguish between those:
1331 # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist?
1332 # - or alternatively, change the build type to MemSanDbg, which enables
1333 # origin tracking and nicer stack traces (which are useful for debugging
1334 # anyway), and check if the origin was TEST_CF_SECRET() or something else.
Neil Armstrong0ab7a232022-03-18 09:57:32 +01001335 msg "build: cmake MSan (clang), full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing"
1336 scripts/config.py full
1337 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
1338 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1339 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
1340 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
1341 make
1342
1343 msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO, Msan + constant flow)"
1344 make test
1345}
1346
1347component_test_memsan_constant_flow_psa () {
1348 # This tests both (1) accesses to undefined memory, and (2) branches or
1349 # memory access depending on secret values. To distinguish between those:
1350 # - unset MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN - does the failure persist?
1351 # - or alternatively, change the build type to MemSanDbg, which enables
1352 # origin tracking and nicer stack traces (which are useful for debugging
1353 # anyway), and check if the origin was TEST_CF_SECRET() or something else.
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02001354 msg "build: cmake MSan (clang), full config with constant flow testing"
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02001355 scripts/config.py full
1356 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
1357 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
1358 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
1359 make
1360
Manuel Pégourié-Gonnard0b2112d2020-07-22 11:09:28 +02001361 msg "test: main suites (Msan + constant flow)"
Manuel Pégourié-Gonnard6240def2020-07-10 09:35:54 +02001362 make test
1363}
1364
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02001365component_test_valgrind_constant_flow () {
1366 # This tests both (1) everything that valgrind's memcheck usually checks
1367 # (heap buffer overflows, use of uninitialized memory, use-after-free,
1368 # etc.) and (2) branches or memory access depending on secret values,
1369 # which will be reported as uninitialized memory. To distinguish between
1370 # secret and actually uninitialized:
1371 # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist?
1372 # - or alternatively, build with debug info and manually run the offending
1373 # test suite with valgrind --track-origins=yes, then check if the origin
1374 # was TEST_CF_SECRET() or something else.
Neil Armstrong0ab7a232022-03-18 09:57:32 +01001375 msg "build: cmake release GCC, full config minus MBEDTLS_USE_PSA_CRYPTO with constant flow testing"
1376 scripts/config.py full
1377 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
1378 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
1379 cmake -D CMAKE_BUILD_TYPE:String=Release .
1380 make
1381
1382 # this only shows a summary of the results (how many of each type)
1383 # details are left in Testing/<date>/DynamicAnalysis.xml
1384 msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO, valgrind + constant flow)"
1385 make memcheck
1386}
1387
1388component_test_valgrind_constant_flow_psa () {
1389 # This tests both (1) everything that valgrind's memcheck usually checks
1390 # (heap buffer overflows, use of uninitialized memory, use-after-free,
1391 # etc.) and (2) branches or memory access depending on secret values,
1392 # which will be reported as uninitialized memory. To distinguish between
1393 # secret and actually uninitialized:
1394 # - unset MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND - does the failure persist?
1395 # - or alternatively, build with debug info and manually run the offending
1396 # test suite with valgrind --track-origins=yes, then check if the origin
1397 # was TEST_CF_SECRET() or something else.
Manuel Pégourié-Gonnard73afa372020-08-19 10:27:38 +02001398 msg "build: cmake release GCC, full config with constant flow testing"
1399 scripts/config.py full
1400 scripts/config.py set MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
1401 cmake -D CMAKE_BUILD_TYPE:String=Release .
1402 make
1403
1404 # this only shows a summary of the results (how many of each type)
1405 # details are left in Testing/<date>/DynamicAnalysis.xml
1406 msg "test: main suites (valgrind + constant flow)"
1407 make memcheck
1408}
1409
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001410component_test_default_no_deprecated () {
Gilles Peskine8386ea22020-04-30 09:07:29 +02001411 # Test that removing the deprecated features from the default
1412 # configuration leaves something consistent.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001413 msg "build: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 30s
1414 scripts/config.py set MBEDTLS_DEPRECATED_REMOVED
1415 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra'
1416
1417 msg "test: make, default + MBEDTLS_DEPRECATED_REMOVED" # ~ 5s
1418 make test
1419}
1420
1421component_test_full_no_deprecated () {
Gilles Peskine30de2e82020-04-20 21:39:22 +02001422 msg "build: make, full_no_deprecated config" # ~ 30s
1423 scripts/config.py full_no_deprecated
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001424 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra'
1425
Gilles Peskine30de2e82020-04-20 21:39:22 +02001426 msg "test: make, full_no_deprecated config" # ~ 5s
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001427 make test
1428}
1429
Gilles Peskine8386ea22020-04-30 09:07:29 +02001430component_test_full_no_deprecated_deprecated_warning () {
1431 # Test that there is nothing deprecated in "full_no_deprecated".
1432 # A deprecated feature would trigger a warning (made fatal) from
1433 # MBEDTLS_DEPRECATED_WARNING.
Gilles Peskine30de2e82020-04-20 21:39:22 +02001434 msg "build: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 30s
1435 scripts/config.py full_no_deprecated
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001436 scripts/config.py unset MBEDTLS_DEPRECATED_REMOVED
1437 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
1438 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra'
1439
Gilles Peskine30de2e82020-04-20 21:39:22 +02001440 msg "test: make, full_no_deprecated config, MBEDTLS_DEPRECATED_WARNING" # ~ 5s
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001441 make test
1442}
1443
Gilles Peskine8386ea22020-04-30 09:07:29 +02001444component_test_full_deprecated_warning () {
1445 # Test that when MBEDTLS_DEPRECATED_WARNING is enabled, the build passes
1446 # with only certain whitelisted types of warnings.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001447 msg "build: make, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001448 scripts/config.py full
1449 scripts/config.py set MBEDTLS_DEPRECATED_WARNING
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001450 # Expect warnings from '#warning' directives in check_config.h.
1451 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=cpp' lib programs
Manuel Pégourié-Gonnard6b368922018-02-20 12:02:07 +01001452
Gilles Peskine8386ea22020-04-30 09:07:29 +02001453 msg "build: make tests, full config + MBEDTLS_DEPRECATED_WARNING, expect warnings" # ~ 30s
1454 # Set MBEDTLS_TEST_DEPRECATED to enable tests for deprecated features.
1455 # By default those are disabled when MBEDTLS_DEPRECATED_WARNING is set.
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001456 # Expect warnings from '#warning' directives in check_config.h and
1457 # from the use of deprecated functions in test suites.
1458 make CC=gcc CFLAGS='-O -Werror -Wall -Wextra -Wno-error=deprecated-declarations -Wno-error=cpp -DMBEDTLS_TEST_DEPRECATED' tests
Gilles Peskine841b14b2019-11-26 17:37:37 +01001459
Gilles Peskine1093d9f2020-04-13 01:03:21 +02001460 msg "test: full config + MBEDTLS_TEST_DEPRECATED" # ~ 30s
1461 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01001462}
Jaeden Ameroed93bdc2018-11-02 16:57:24 +00001463
Gilles Peskineec541fe2020-01-31 14:24:14 +01001464# Check that the specified libraries exist and are empty.
1465are_empty_libraries () {
1466 nm "$@" >/dev/null 2>/dev/null
1467 ! nm "$@" 2>/dev/null | grep -v ':$' | grep .
1468}
1469
1470component_build_crypto_default () {
1471 msg "build: make, crypto only"
1472 scripts/config.py crypto
Gilles Peskine6bb39152020-02-03 11:59:20 +01001473 make CFLAGS='-O1 -Werror'
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001474 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01001475}
1476
1477component_build_crypto_full () {
1478 msg "build: make, crypto only, full config"
1479 scripts/config.py crypto_full
Gilles Peskine6bb39152020-02-03 11:59:20 +01001480 make CFLAGS='-O1 -Werror'
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001481 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01001482}
1483
1484component_build_crypto_baremetal () {
1485 msg "build: make, crypto only, baremetal config"
1486 scripts/config.py crypto_baremetal
David Horstmann61faf662021-11-30 11:40:54 +00001487 make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001488 are_empty_libraries library/libmbedx509.* library/libmbedtls.*
Gilles Peskineec541fe2020-01-31 14:24:14 +01001489}
Daniel Axtens446af202020-09-02 21:30:13 +10001490support_build_crypto_baremetal () {
Daniel Axtens814c8132020-08-31 14:22:58 +10001491 support_build_baremetal "$@"
1492}
1493
1494component_build_baremetal () {
1495 msg "build: make, baremetal config"
1496 scripts/config.py baremetal
David Horstmann61faf662021-11-30 11:40:54 +00001497 make CFLAGS="-O1 -Werror -I$PWD/tests/include/baremetal-override/"
Daniel Axtens814c8132020-08-31 14:22:58 +10001498}
1499support_build_baremetal () {
Daniel Axtens446af202020-09-02 21:30:13 +10001500 # Older Glibc versions include time.h from other headers such as stdlib.h,
1501 # which makes the no-time.h-in-baremetal check fail. Ubuntu 16.04 has this
1502 # problem, Ubuntu 18.04 is ok.
1503 ! grep -q -F time.h /usr/include/x86_64-linux-gnu/sys/types.h
1504}
Gilles Peskineec541fe2020-01-31 14:24:14 +01001505
Gilles Peskine8f073122018-11-27 15:58:47 +01001506component_test_depends_curves () {
1507 msg "test/build: curves.pl (gcc)" # ~ 4 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001508 tests/scripts/curves.pl
Gilles Peskine8f073122018-11-27 15:58:47 +01001509}
Jaeden Ameroacaabe72018-11-07 11:52:52 +00001510
John Durkopc14be902020-08-20 06:16:41 -07001511component_test_depends_curves_psa () {
1512 msg "test/build: curves.pl with MBEDTLS_USE_PSA_CRYPTO defined (gcc)"
1513 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001514 tests/scripts/curves.pl
John Durkopc14be902020-08-20 06:16:41 -07001515}
1516
Gilles Peskine8f073122018-11-27 15:58:47 +01001517component_test_depends_hashes () {
1518 msg "test/build: depends-hashes.pl (gcc)" # ~ 2 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001519 tests/scripts/depends-hashes.pl
Gilles Peskine8f073122018-11-27 15:58:47 +01001520}
Jaeden Ameroacaabe72018-11-07 11:52:52 +00001521
John Durkop2ec2eaa2020-08-24 18:29:15 -07001522component_test_depends_hashes_psa () {
1523 msg "test/build: depends-hashes.pl with MBEDTLS_USE_PSA_CRYPTO defined (gcc)"
1524 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001525 tests/scripts/depends-hashes.pl
John Durkop2ec2eaa2020-08-24 18:29:15 -07001526}
1527
Gilles Peskine8f073122018-11-27 15:58:47 +01001528component_test_depends_pkalgs () {
1529 msg "test/build: depends-pkalgs.pl (gcc)" # ~ 2 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001530 tests/scripts/depends-pkalgs.pl
Gilles Peskine8f073122018-11-27 15:58:47 +01001531}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001532
John Durkop619e09e2020-09-08 22:19:56 -07001533component_test_depends_pkalgs_psa () {
1534 msg "test/build: depends-pkalgs.pl with MBEDTLS_USE_PSA_CRYPTO defined (gcc)"
1535 scripts/config.py set MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001536 tests/scripts/depends-pkalgs.pl
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001537}
1538
Gilles Peskine8f073122018-11-27 15:58:47 +01001539component_build_key_exchanges () {
1540 msg "test/build: key-exchanges (gcc)" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001541 tests/scripts/key-exchanges.pl
Gilles Peskine8f073122018-11-27 15:58:47 +01001542}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001543
Gilles Peskine03ab5442021-07-09 15:19:28 +02001544component_test_make_cxx () {
1545 msg "build: Unix make, full, gcc + g++"
1546 scripts/config.py full
1547 make TEST_CPP=1 lib programs
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001548
Gilles Peskine03ab5442021-07-09 15:19:28 +02001549 msg "test: cpp_dummy_build"
1550 programs/test/cpp_dummy_build
Gilles Peskine8f073122018-11-27 15:58:47 +01001551}
Manuel Pégourié-Gonnard655c0a82018-10-30 11:20:45 +01001552
Gilles Peskinecc73cc52021-05-25 09:04:46 +02001553component_build_module_alt () {
1554 msg "build: MBEDTLS_XXX_ALT" # ~30s
1555 scripts/config.py full
1556 # Disable options that are incompatible with some ALT implementations.
1557 # aesni.c and padlock.c reference mbedtls_aes_context fields directly.
1558 scripts/config.py unset MBEDTLS_AESNI_C
1559 scripts/config.py unset MBEDTLS_PADLOCK_C
Gilles Peskinecc73cc52021-05-25 09:04:46 +02001560 # You can only have one threading implementation: alt or pthread, not both.
1561 scripts/config.py unset MBEDTLS_THREADING_PTHREAD
Gilles Peskine5c3f18d2021-05-31 21:21:12 +02001562 # The SpecifiedECDomain parsing code accesses mbedtls_ecp_group fields
1563 # directly and assumes the implementation works with partial groups.
1564 scripts/config.py unset MBEDTLS_PK_PARSE_EC_EXTENDED
Tom Cosgrovef3ebd902022-02-20 22:25:31 +00001565 # MBEDTLS_SHA256_*ALT can't be used with MBEDTLS_SHA256_USE_A64_CRYPTO_*
1566 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT
1567 scripts/config.py unset MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00001568 # MBEDTLS_SHA512_*ALT can't be used with MBEDTLS_SHA512_USE_A64_CRYPTO_*
1569 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
1570 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY
Gilles Peskinecc73cc52021-05-25 09:04:46 +02001571 # Enable all MBEDTLS_XXX_ALT for whole modules. Do not enable
1572 # MBEDTLS_XXX_YYY_ALT which are for single functions.
1573 scripts/config.py set-all 'MBEDTLS_([A-Z0-9]*|NIST_KW)_ALT'
Gilles Peskine1628a9c2021-05-31 22:09:58 +02001574 scripts/config.py unset MBEDTLS_DHM_ALT #incompatible with MBEDTLS_DEBUG_C
1575 # We can only compile, not link, since we don't have any implementations
1576 # suitable for testing with the dummy alt headers.
1577 make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib
1578}
1579
1580component_build_dhm_alt () {
1581 msg "build: MBEDTLS_DHM_ALT" # ~30s
1582 scripts/config.py full
1583 scripts/config.py set MBEDTLS_DHM_ALT
1584 # debug.c currently references mbedtls_dhm_context fields directly.
1585 scripts/config.py unset MBEDTLS_DEBUG_C
Gilles Peskinecc73cc52021-05-25 09:04:46 +02001586 # We can only compile, not link, since we don't have any implementations
1587 # suitable for testing with the dummy alt headers.
1588 make CC=gcc CFLAGS='-Werror -Wall -Wextra -I../tests/include/alt-dummy' lib
1589}
1590
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001591component_test_no_use_psa_crypto_full_cmake_asan() {
1592 # full minus MBEDTLS_USE_PSA_CRYPTO: run the same set of tests as basic-build-test.sh
Gilles Peskinedc3a1792019-09-03 11:42:04 +02001593 msg "build: cmake, full config minus MBEDTLS_USE_PSA_CRYPTO, ASan"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001594 scripts/config.py full
1595 scripts/config.py set MBEDTLS_ECP_RESTARTABLE # not using PSA, so enable restartable ECC
1596 scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
1597 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cron6f135e12021-12-08 16:57:54 +01001598 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001599 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
Gilles Peskinedc6d8382020-04-12 14:21:55 +02001600 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02001601 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
Manuel Pégourié-Gonnardd8167e82019-02-01 11:12:52 +01001602 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
Andrzej Kurekde5a0072019-02-01 07:03:03 -05001603 make
Manuel Pégourié-Gonnard43be6cd2017-06-20 09:53:42 +02001604
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001605 msg "test: main suites (full minus MBEDTLS_USE_PSA_CRYPTO)"
Andrzej Kurekde5a0072019-02-01 07:03:03 -05001606 make test
Manuel Pégourié-Gonnard503a5ef2015-10-23 09:04:45 +02001607
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001608 msg "test: ssl-opt.sh (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001609 tests/ssl-opt.sh
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01001610
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001611 msg "test: compat.sh default (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001612 tests/compat.sh
Andrzej Kurek991f9fe2018-07-02 09:08:21 -04001613
TRodziewicz10e8cf52021-05-31 17:58:57 +02001614 msg "test: compat.sh DES & NULL (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001615 env OPENSSL_CMD="$OPENSSL_LEGACY" GNUTLS_CLI="$GNUTLS_LEGACY_CLI" GNUTLS_SERV="$GNUTLS_LEGACY_SERV" tests/compat.sh -e '3DES\|DES-CBC3' -f 'NULL\|DES'
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05001616
Manuel Pégourié-Gonnard971dea32019-02-01 12:38:40 +01001617 msg "test: compat.sh ARIA + ChachaPoly (full minus MBEDTLS_USE_PSA_CRYPTO)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02001618 env OPENSSL_CMD="$OPENSSL_NEXT" tests/compat.sh -e '^$' -f 'ARIA\|CHACHA'
Andrzej Kurekde5a0072019-02-01 07:03:03 -05001619}
Andrzej Kurekc470b6b2019-01-31 08:20:20 -05001620
Ronald Cron403c15c2021-09-13 09:38:05 +02001621component_test_psa_crypto_config_accel_ecdsa () {
1622 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA"
1623
1624 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
1625 # partial support for cipher operations in the driver test library.
1626 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
1627 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
1628
1629 # SHA384 needed for some ECDSA signature tests.
1630 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA384_C
1631 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA512_C
1632
1633 loc_accel_list="ALG_ECDSA ALG_DETERMINISTIC_ECDSA KEY_TYPE_ECC_KEY_PAIR KEY_TYPE_ECC_PUBLIC_KEY"
1634 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
1635 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
1636
1637 # Restore test driver base configuration
1638 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA384_C
1639 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA512_C
1640
John Durkopd8959392020-09-20 23:09:17 -07001641 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
Ronald Cron403c15c2021-09-13 09:38:05 +02001642 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
John Durkopd8959392020-09-20 23:09:17 -07001643 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001644 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron403c15c2021-09-13 09:38:05 +02001645 scripts/config.py unset MBEDTLS_ECDSA_C
1646 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
1647 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1648
1649 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
1650 make CFLAGS="$ASAN_CFLAGS -O -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
1651
Gilles Peskine827dbd92022-02-04 00:30:54 +01001652 not grep mbedtls_ecdsa_ library/ecdsa.o
Ronald Cron403c15c2021-09-13 09:38:05 +02001653
1654 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated ECDSA"
1655 make test
1656}
1657
1658component_test_psa_crypto_config_accel_rsa_signature () {
1659 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated RSA signature"
1660
1661 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
1662 # partial support for cipher operations in the driver test library.
1663 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
1664 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
1665
1666 # It seems it is not possible to remove only the support for RSA signature
1667 # in the library. Thus we have to remove all RSA support (signature and
1668 # encryption/decryption). AS there is no driver support for asymmetric
1669 # encryption/decryption so far remove RSA encryption/decryption from the
1670 # application algorithm list.
1671 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
1672 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
1673
1674 # Make sure both the library and the test library support the SHA hash
1675 # algorithms and only those ones (SHA256 is included by default). That way:
1676 # - the test library can compute the RSA signatures even in the case of a
1677 # composite RSA signature algorithm based on a SHA hash (no other hash
1678 # used in the unit tests).
1679 # - the dependency of RSA signature tests on PSA_WANT_ALG_SHA_xyz is
1680 # fulfilled as the hash SHA algorithm is supported by the library, and
1681 # thus the tests are run, not skipped.
1682 # - when testing a signature key with an algorithm wildcard built from
1683 # PSA_ALG_ANY_HASH as algorithm to test with the key, the chosen hash
1684 # algorithm based on the hashes supported by the library is also
1685 # supported by the test library.
Ronald Cron403c15c2021-09-13 09:38:05 +02001686 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
1687 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160_C
1688
1689 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA1_C
1690 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_SHA512_C
1691 # We need PEM parsing in the test library as well to support the import
1692 # of PEM encoded RSA keys.
1693 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_PEM_PARSE_C
1694 scripts/config.py -f tests/include/test/drivers/config_test_driver.h set MBEDTLS_BASE64_C
1695
1696 loc_accel_list="ALG_RSA_PKCS1V15_SIGN ALG_RSA_PSS KEY_TYPE_RSA_KEY_PAIR KEY_TYPE_RSA_PUBLIC_KEY"
1697 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
1698 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
1699
1700 # Restore test driver base configuration
1701 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA1_C
1702 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_SHA512_C
1703 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_PEM_PARSE_C
1704 scripts/config.py -f tests/include/test/drivers/config_test_driver.h unset MBEDTLS_BASE64_C
1705
1706
1707 # Mbed TLS library build
1708 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1709 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1710
1711 # Remove RSA support and its dependencies
1712 scripts/config.py unset MBEDTLS_PKCS1_V15
1713 scripts/config.py unset MBEDTLS_PKCS1_V21
1714 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
1715 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
1716 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
1717 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
1718 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
1719 scripts/config.py unset MBEDTLS_RSA_C
1720 scripts/config.py unset MBEDTLS_X509_RSASSA_PSS_SUPPORT
1721
Ronald Cron403c15c2021-09-13 09:38:05 +02001722 scripts/config.py unset MBEDTLS_MD5_C
1723 scripts/config.py unset MBEDTLS_RIPEMD160_C
1724 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1
1725 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_1
1726 scripts/config.py unset MBEDTLS_SSL_CBC_RECORD_SPLITTING
1727
1728 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
1729 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
1730
Gilles Peskine827dbd92022-02-04 00:30:54 +01001731 not grep mbedtls_rsa_rsassa_pkcs1_v15_sign library/rsa.o
1732 not grep mbedtls_rsa_rsassa_pss_sign_ext library/rsa.o
Ronald Cron403c15c2021-09-13 09:38:05 +02001733
1734 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated RSA signature"
1735 make test
1736}
1737
Ronald Cronb2312452021-05-08 14:32:59 +02001738component_test_psa_crypto_config_accel_hash () {
1739 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
1740
1741 # Disable ALG_STREAM_CIPHER and ALG_ECB_NO_PADDING to avoid having
1742 # partial support for cipher operations in the driver test library.
1743 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
1744 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
1745
Ronald Cron27d47712021-12-07 09:54:36 +01001746 loc_accel_list="ALG_MD5 ALG_RIPEMD160 ALG_SHA_1 ALG_SHA_224 ALG_SHA_256 ALG_SHA_384 ALG_SHA_512"
Ronald Cronb2312452021-05-08 14:32:59 +02001747 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
1748 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
1749
1750 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1751 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
Ronald Cronb2312452021-05-08 14:32:59 +02001752 scripts/config.py unset MBEDTLS_MD5_C
1753 scripts/config.py unset MBEDTLS_RIPEMD160_C
1754 scripts/config.py unset MBEDTLS_SHA1_C
1755 # Don't unset MBEDTLS_SHA256_C as it is needed by PSA crypto core.
1756 scripts/config.py unset MBEDTLS_SHA384_C
1757 scripts/config.py unset MBEDTLS_SHA512_C
1758 # Unset MBEDTLS_SSL_PROTO_SSL3, MBEDTLS_SSL_PROTO_TLS1 and MBEDTLS_SSL_PROTO_TLS1_1 as they depend on MBEDTLS_SHA1_C
1759 scripts/config.py unset MBEDTLS_SSL_PROTO_SSL3
1760 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1
1761 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_1
1762 # Unset MBEDTLS_SSL_CBC_RECORD_SPLITTING as it depends on MBEDTLS_SSL_PROTO_TLS1 in the default configuration.
1763 scripts/config.py unset MBEDTLS_SSL_CBC_RECORD_SPLITTING
1764 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
1765 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
1766
Gilles Peskine827dbd92022-02-04 00:30:54 +01001767 not grep mbedtls_sha512_init library/sha512.o
1768 not grep mbedtls_sha1_init library/sha1.o
Ronald Cronb2312452021-05-08 14:32:59 +02001769
1770 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
1771 make test
1772}
1773
Ronald Cron3a8714d2021-10-18 11:26:01 +02001774component_test_psa_crypto_config_accel_cipher () {
1775 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated cipher"
1776
1777 loc_accel_list="ALG_CBC_NO_PADDING ALG_CBC_PKCS7 ALG_CTR ALG_CFB ALG_OFB ALG_XTS KEY_TYPE_DES"
1778 loc_accel_flags=$( echo "$loc_accel_list" | sed 's/[^ ]* */-DLIBTESTDRIVER1_MBEDTLS_PSA_ACCEL_&/g' )
1779 make -C tests libtestdriver1.a CFLAGS="$ASAN_CFLAGS $loc_accel_flags" LDFLAGS="$ASAN_CFLAGS"
1780
1781 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1782 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
Ronald Cron067de3b2021-03-11 11:49:03 +01001783
1784 # There is no intended accelerator support for ALG STREAM_CIPHER and
1785 # ALG_ECB_NO_PADDING. Therefore, asking for them in the build implies the
1786 # inclusion of the Mbed TLS cipher operations. As we want to test here with
1787 # cipher operations solely supported by accelerators, disabled those
1788 # PSA configuration options.
1789 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_STREAM_CIPHER
1790 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_ECB_NO_PADDING
Ronald Cron3a8714d2021-10-18 11:26:01 +02001791 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_CMAC
Ronald Cron067de3b2021-03-11 11:49:03 +01001792
Ronald Cron3a8714d2021-10-18 11:26:01 +02001793 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
1794 scripts/config.py unset MBEDTLS_CIPHER_PADDING_PKCS7
1795 scripts/config.py unset MBEDTLS_CIPHER_MODE_CTR
1796 scripts/config.py unset MBEDTLS_CIPHER_MODE_CFB
1797 scripts/config.py unset MBEDTLS_CIPHER_MODE_OFB
1798 scripts/config.py unset MBEDTLS_CIPHER_MODE_XTS
Ronald Cron067de3b2021-03-11 11:49:03 +01001799 scripts/config.py unset MBEDTLS_DES_C
1800
Ronald Cron3a8714d2021-10-18 11:26:01 +02001801 loc_accel_flags="$loc_accel_flags $( echo "$loc_accel_list" | sed 's/[^ ]* */-DMBEDTLS_PSA_ACCEL_&/g' )"
1802 make CFLAGS="$ASAN_CFLAGS -Werror -I../tests/include -I../tests -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_TEST_LIBTESTDRIVER1 $loc_accel_flags" LDFLAGS="-ltestdriver1 $ASAN_CFLAGS"
Ronald Cron17b3afc2020-12-10 18:17:09 +01001803
Gilles Peskine827dbd92022-02-04 00:30:54 +01001804 not grep mbedtls_des* library/des.o
Ronald Cron3a8714d2021-10-18 11:26:01 +02001805
1806 msg "test: MBEDTLS_PSA_CRYPTO_CONFIG with accelerated hash"
John Durkop4377bf72020-10-23 01:26:57 -07001807 make test
1808}
1809
1810component_test_psa_crypto_config_no_driver() {
1811 # full plus MBEDTLS_PSA_CRYPTO_CONFIG
1812 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG minus MBEDTLS_PSA_CRYPTO_DRIVERS"
1813 scripts/config.py full
1814 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1815 scripts/config.py unset MBEDTLS_PSA_CRYPTO_DRIVERS
1816 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001817 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkope7012c72020-10-26 09:55:01 -07001818 make CC=gcc CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkop4377bf72020-10-23 01:26:57 -07001819
1820 msg "test: full + MBEDTLS_PSA_CRYPTO_CONFIG minus MBEDTLS_PSA_CRYPTO_DRIVERS"
John Durkopd8959392020-09-20 23:09:17 -07001821 make test
1822}
1823
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02001824component_test_psa_crypto_config_chachapoly_disabled() {
Przemyslaw Stekiel316c4fa2021-10-15 08:04:53 +02001825 # full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305
1826 msg "build: full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305"
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02001827 scripts/config.py full
1828 scripts/config.py unset MBEDTLS_CHACHAPOLY_C
1829 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_GCM
1830 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_CHACHA20_POLY1305
1831 make CC=gcc CFLAGS="$ASAN_CFLAGS -O2" LDFLAGS="$ASAN_CFLAGS"
1832
Przemyslaw Stekiel316c4fa2021-10-15 08:04:53 +02001833 msg "test: full minus MBEDTLS_CHACHAPOLY_C without PSA_WANT_ALG_GCM and PSA_WANT_ALG_CHACHA20_POLY1305"
Przemyslaw Stekiel1ecfdea2021-10-13 11:09:44 +02001834 make test
1835}
1836
John Durkop8ac0b802020-10-23 01:32:15 -07001837# This should be renamed to test and updated once the accelerator ECDSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001838component_build_psa_accel_alg_ecdsa() {
John Durkopdd544e12020-10-12 21:47:19 -07001839 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_ECDSA
1840 # without MBEDTLS_ECDSA_C
John Durkop28baa1f2020-10-23 00:51:52 -07001841 # PSA_WANT_ALG_ECDSA and PSA_WANT_ALG_DETERMINISTIC_ECDSA are already
1842 # set in include/psa/crypto_config.h
John Durkopdd544e12020-10-12 21:47:19 -07001843 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_ECDSA without MBEDTLS_ECDSA_C"
John Durkopd8959392020-09-20 23:09:17 -07001844 scripts/config.py full
1845 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1846 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1847 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001848 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd8959392020-09-20 23:09:17 -07001849 scripts/config.py unset MBEDTLS_ECDSA_C
John Durkop28baa1f2020-10-23 00:51:52 -07001850 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1851 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
John Durkopd8959392020-09-20 23:09:17 -07001852 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
John Durkop28baa1f2020-10-23 00:51:52 -07001853 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_ECDSA -DMBEDTLS_PSA_ACCEL_ALG_DETERMINISTIC_ECDSA -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkopd8959392020-09-20 23:09:17 -07001854}
1855
John Durkopd0321952020-10-29 21:37:36 -07001856# This should be renamed to test and updated once the accelerator ECDH code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001857component_build_psa_accel_alg_ecdh() {
John Durkopd0321952020-10-29 21:37:36 -07001858 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_ECDH
1859 # without MBEDTLS_ECDH_C
1860 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_ECDH without MBEDTLS_ECDH_C"
1861 scripts/config.py full
1862 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1863 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1864 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001865 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07001866 scripts/config.py unset MBEDTLS_ECDH_C
1867 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
1868 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
1869 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
1870 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
1871 scripts/config.py unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1872 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1873 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_ECDH -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1874}
1875
John Durkopf4c4cb02020-10-28 20:09:55 -07001876# This should be renamed to test and updated once the accelerator ECC key pair code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001877component_build_psa_accel_key_type_ecc_key_pair() {
John Durkop9814fa22020-11-04 12:28:15 -08001878 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_ECC_KEY_PAIR
1879 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_ECC_KEY_PAIR"
John Durkopf4c4cb02020-10-28 20:09:55 -07001880 scripts/config.py full
1881 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1882 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1883 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001884 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop9814fa22020-11-04 12:28:15 -08001885 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_KEY_PAIR 1
John Durkop07cc04a2020-11-16 22:08:34 -08001886 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
John Durkopf4c4cb02020-10-28 20:09:55 -07001887 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
John Durkop9814fa22020-11-04 12:28:15 -08001888 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkopf4c4cb02020-10-28 20:09:55 -07001889}
1890
1891# This should be renamed to test and updated once the accelerator ECC public key code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001892component_build_psa_accel_key_type_ecc_public_key() {
John Durkop9814fa22020-11-04 12:28:15 -08001893 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY
1894 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY"
John Durkopf4c4cb02020-10-28 20:09:55 -07001895 scripts/config.py full
1896 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1897 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1898 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001899 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop9814fa22020-11-04 12:28:15 -08001900 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY 1
1901 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_KEY_TYPE_ECC_KEY_PAIR
John Durkopf4c4cb02020-10-28 20:09:55 -07001902 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
John Durkop9814fa22020-11-04 12:28:15 -08001903 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkopf4c4cb02020-10-28 20:09:55 -07001904}
1905
John Durkopd0321952020-10-29 21:37:36 -07001906# This should be renamed to test and updated once the accelerator HMAC code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001907component_build_psa_accel_alg_hmac() {
John Durkopd0321952020-10-29 21:37:36 -07001908 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_HMAC
1909 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_HMAC"
1910 scripts/config.py full
1911 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1912 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1913 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001914 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07001915 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1916 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HMAC -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1917}
1918
1919# This should be renamed to test and updated once the accelerator HKDF code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08001920component_build_psa_accel_alg_hkdf() {
John Durkopd0321952020-10-29 21:37:36 -07001921 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_HKDF
1922 # without MBEDTLS_HKDF_C
1923 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_HKDF without MBEDTLS_HKDF_C"
1924 scripts/config.py full
1925 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1926 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1927 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001928 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07001929 scripts/config.py unset MBEDTLS_HKDF_C
Ronald Cron6f135e12021-12-08 16:57:54 +01001930 # Make sure to unset TLS1_3 since it requires HKDF_C and will not build properly without it.
1931 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopd0321952020-10-29 21:37:36 -07001932 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1933 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_HKDF -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1934}
1935
John Durkop1b7ee052020-11-27 08:51:22 -08001936# This should be renamed to test and updated once the accelerator MD5 code is in place and ready to test.
1937component_build_psa_accel_alg_md5() {
1938 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_MD5 without other hashes
1939 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_MD5 - other hashes"
1940 scripts/config.py full
1941 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1942 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1943 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001944 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08001945 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
1946 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
1947 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
1948 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
1949 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
1950 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
1951 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1952 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_MD5 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1953}
1954
1955# This should be renamed to test and updated once the accelerator RIPEMD160 code is in place and ready to test.
1956component_build_psa_accel_alg_ripemd160() {
1957 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RIPEMD160 without other hashes
1958 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RIPEMD160 - other hashes"
1959 scripts/config.py full
1960 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1961 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1962 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001963 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08001964 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
1965 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
1966 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
1967 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
1968 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
1969 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
1970 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1971 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RIPEMD160 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1972}
1973
1974# This should be renamed to test and updated once the accelerator SHA1 code is in place and ready to test.
1975component_build_psa_accel_alg_sha1() {
1976 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_1 without other hashes
1977 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_1 - other hashes"
1978 scripts/config.py full
1979 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1980 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
1981 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01001982 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08001983 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
1984 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
1985 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
1986 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
1987 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
1988 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
1989 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
1990 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_1 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
1991}
1992
1993# This should be renamed to test and updated once the accelerator SHA224 code is in place and ready to test.
1994component_build_psa_accel_alg_sha224() {
1995 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_224 without other hashes
1996 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_224 - other hashes"
1997 scripts/config.py full
1998 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
1999 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2000 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002001 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002002 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2003 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2004 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2005 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2006 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
2007 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2008 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_224 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2009}
2010
2011# This should be renamed to test and updated once the accelerator SHA256 code is in place and ready to test.
2012component_build_psa_accel_alg_sha256() {
2013 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_256 without other hashes
2014 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_256 - other hashes"
2015 scripts/config.py full
2016 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2017 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2018 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002019 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002020 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2021 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2022 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2023 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2024 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2025 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_512
2026 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2027 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_256 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2028}
2029
2030# This should be renamed to test and updated once the accelerator SHA384 code is in place and ready to test.
2031component_build_psa_accel_alg_sha384() {
2032 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_384 without other hashes
2033 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_384 - other hashes"
2034 scripts/config.py full
2035 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2036 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2037 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002038 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002039 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2040 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2041 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2042 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2043 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
2044 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2045 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_384 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2046}
2047
2048# This should be renamed to test and updated once the accelerator SHA512 code is in place and ready to test.
2049component_build_psa_accel_alg_sha512() {
2050 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_SHA_512 without other hashes
2051 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_SHA_512 - other hashes"
2052 scripts/config.py full
2053 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2054 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2055 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002056 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkop1b7ee052020-11-27 08:51:22 -08002057 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_MD5
2058 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RIPEMD160
2059 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_1
2060 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_224
2061 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_256
2062 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_SHA_384
2063 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2064 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_SHA_512 -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2065}
2066
John Durkopd0321952020-10-29 21:37:36 -07002067# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002068component_build_psa_accel_alg_rsa_pkcs1v15_crypt() {
John Durkopbd069d32020-10-31 22:14:03 -07002069 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2070 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PKCS1V15_CRYPT + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
John Durkopd0321952020-10-29 21:37:36 -07002071 scripts/config.py full
2072 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2073 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2074 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002075 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002076 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PKCS1V15_CRYPT 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002077 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
2078 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
2079 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS
John Durkopd0321952020-10-29 21:37:36 -07002080 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
John Durkopbd069d32020-10-31 22:14:03 -07002081 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_CRYPT -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2082}
2083
2084# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002085component_build_psa_accel_alg_rsa_pkcs1v15_sign() {
John Durkopbd069d32020-10-31 22:14:03 -07002086 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PKCS1V15_SIGN and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
2087 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PKCS1V15_SIGN + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
2088 scripts/config.py full
2089 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2090 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2091 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002092 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002093 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PKCS1V15_SIGN 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002094 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2095 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
2096 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS
John Durkopbd069d32020-10-31 22:14:03 -07002097 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2098 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PKCS1V15_SIGN -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2099}
2100
2101# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002102component_build_psa_accel_alg_rsa_oaep() {
John Durkopbd069d32020-10-31 22:14:03 -07002103 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_OAEP and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
2104 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_OAEP + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
2105 scripts/config.py full
2106 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2107 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2108 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002109 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002110 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_OAEP 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002111 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2112 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
2113 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PSS
John Durkopbd069d32020-10-31 22:14:03 -07002114 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2115 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_OAEP -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2116}
2117
2118# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002119component_build_psa_accel_alg_rsa_pss() {
John Durkopbd069d32020-10-31 22:14:03 -07002120 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_ALG_RSA_PSS and PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY
2121 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_ALG_RSA_PSS + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY"
2122 scripts/config.py full
2123 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2124 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2125 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002126 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002127 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1
John Durkop7fc75ea2020-11-03 19:05:36 -08002128 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
2129 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_PKCS1V15_SIGN
2130 scripts/config.py -f include/psa/crypto_config.h unset PSA_WANT_ALG_RSA_OAEP
John Durkopbd069d32020-10-31 22:14:03 -07002131 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2132 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_ALG_RSA_PSS -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2133}
2134
2135# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002136component_build_psa_accel_key_type_rsa_key_pair() {
John Durkopbd069d32020-10-31 22:14:03 -07002137 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_RSA_KEY_PAIR and PSA_WANT_ALG_RSA_PSS
2138 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_RSA_KEY_PAIR + PSA_WANT_ALG_RSA_PSS"
2139 scripts/config.py full
2140 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2141 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2142 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002143 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002144 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1
2145 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_RSA_KEY_PAIR 1
2146 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2147 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_KEY_PAIR -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
2148}
2149
2150# This should be renamed to test and updated once the accelerator RSA code is in place and ready to test.
John Durkop6ba40d12020-11-10 08:50:04 -08002151component_build_psa_accel_key_type_rsa_public_key() {
John Durkopbd069d32020-10-31 22:14:03 -07002152 # full plus MBEDTLS_PSA_CRYPTO_CONFIG with PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY and PSA_WANT_ALG_RSA_PSS
2153 msg "build: full + MBEDTLS_PSA_CRYPTO_CONFIG + PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY + PSA_WANT_ALG_RSA_PSS"
2154 scripts/config.py full
2155 scripts/config.py set MBEDTLS_PSA_CRYPTO_CONFIG
2156 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
2157 scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO
Ronald Cronf6606552022-03-15 11:23:25 +01002158 scripts/config.py unset MBEDTLS_SSL_PROTO_TLS1_3
John Durkopbd069d32020-10-31 22:14:03 -07002159 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_ALG_RSA_PSS 1
2160 scripts/config.py -f include/psa/crypto_config.h set PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY 1
2161 # Need to define the correct symbol and include the test driver header path in order to build with the test driver
2162 make CC=gcc CFLAGS="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST -DMBEDTLS_PSA_ACCEL_KEY_TYPE_RSA_PUBLIC_KEY -I../tests/include -O2" LDFLAGS="$ASAN_CFLAGS"
John Durkopd0321952020-10-29 21:37:36 -07002163}
2164
Gilles Peskine8f073122018-11-27 15:58:47 +01002165component_test_no_platform () {
2166 # Full configuration build, without platform support, file IO and net sockets.
2167 # This should catch missing mbedtls_printf definitions, and by disabling file
2168 # IO, it should catch missing '#include <stdio.h>'
2169 msg "build: full config except platform/fsio/net, make, gcc, C99" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002170 scripts/config.py full
2171 scripts/config.py unset MBEDTLS_PLATFORM_C
2172 scripts/config.py unset MBEDTLS_NET_C
2173 scripts/config.py unset MBEDTLS_PLATFORM_MEMORY
2174 scripts/config.py unset MBEDTLS_PLATFORM_PRINTF_ALT
2175 scripts/config.py unset MBEDTLS_PLATFORM_FPRINTF_ALT
2176 scripts/config.py unset MBEDTLS_PLATFORM_SNPRINTF_ALT
2177 scripts/config.py unset MBEDTLS_PLATFORM_TIME_ALT
2178 scripts/config.py unset MBEDTLS_PLATFORM_EXIT_ALT
Gilles Peskine32e889d2020-04-12 23:43:28 +02002179 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002180 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
2181 scripts/config.py unset MBEDTLS_FS_IO
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002182 scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002183 scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
2184 scripts/config.py unset MBEDTLS_PSA_ITS_FILE_C
Gilles Peskine8f073122018-11-27 15:58:47 +01002185 # Note, _DEFAULT_SOURCE needs to be defined for platforms using glibc version >2.19,
2186 # to re-enable platform integration features otherwise disabled in C99 builds
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002187 make CC=gcc CFLAGS='-Werror -Wall -Wextra -std=c99 -pedantic -Os -D_DEFAULT_SOURCE' lib programs
2188 make CC=gcc CFLAGS='-Werror -Wall -Wextra -Os' test
Gilles Peskine8f073122018-11-27 15:58:47 +01002189}
Manuel Pégourié-Gonnarda71780e2015-02-13 13:56:55 +00002190
Gilles Peskine8f073122018-11-27 15:58:47 +01002191component_build_no_std_function () {
2192 # catch compile bugs in _uninit functions
2193 msg "build: full config with NO_STD_FUNCTION, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002194 scripts/config.py full
2195 scripts/config.py set MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
2196 scripts/config.py unset MBEDTLS_ENTROPY_NV_SEED
Gilles Peskine32e889d2020-04-12 23:43:28 +02002197 scripts/config.py unset MBEDTLS_PLATFORM_NV_SEED_ALT
Gilles Peskinef4d2fd42021-10-08 11:45:47 +02002198 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check .
Gilles Peskinedbf7b7e2021-10-07 19:34:57 +02002199 make
Gilles Peskine8f073122018-11-27 15:58:47 +01002200}
Manuel Pégourié-Gonnarddccb80b2015-06-03 10:20:33 +01002201
Gilles Peskine8f073122018-11-27 15:58:47 +01002202component_build_no_ssl_srv () {
Ronald Cronde1adee2022-03-07 16:20:30 +01002203 msg "build: full config except SSL server, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002204 scripts/config.py full
2205 scripts/config.py unset MBEDTLS_SSL_SRV_C
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002206 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1'
Gilles Peskine8f073122018-11-27 15:58:47 +01002207}
Manuel Pégourié-Gonnard66b8e952015-05-20 11:13:56 +02002208
Gilles Peskine8f073122018-11-27 15:58:47 +01002209component_build_no_ssl_cli () {
Ronald Cronde1adee2022-03-07 16:20:30 +01002210 msg "build: full config except SSL client, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002211 scripts/config.py full
2212 scripts/config.py unset MBEDTLS_SSL_CLI_C
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002213 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1'
Gilles Peskine8f073122018-11-27 15:58:47 +01002214}
Manuel Pégourié-Gonnard66b8e952015-05-20 11:13:56 +02002215
Gilles Peskine8f073122018-11-27 15:58:47 +01002216component_build_no_sockets () {
2217 # Note, C99 compliance can also be tested with the sockets support disabled,
2218 # as that requires a POSIX platform (which isn't the same as C99).
2219 msg "build: full config except net_sockets.c, make, gcc -std=c99 -pedantic" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002220 scripts/config.py full
2221 scripts/config.py unset MBEDTLS_NET_C # getaddrinfo() undeclared, etc.
2222 scripts/config.py set MBEDTLS_NO_PLATFORM_ENTROPY # uses syscall() on GNU/Linux
Gilles Peskine6ec0f0f2019-09-20 19:23:10 +02002223 make CC=gcc CFLAGS='-Werror -Wall -Wextra -O1 -std=c99 -pedantic' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01002224}
Manuel Pégourié-Gonnard009a2642015-05-29 10:31:13 +02002225
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04002226component_test_memory_buffer_allocator_backtrace () {
2227 msg "build: default config with memory buffer allocator and backtrace enabled"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002228 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
2229 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
2230 scripts/config.py set MBEDTLS_MEMORY_BACKTRACE
2231 scripts/config.py set MBEDTLS_MEMORY_DEBUG
Gilles Peskinee7fc7ef2021-10-19 21:33:32 +02002232 CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release .
Andrzej Kurek69f20aa2019-09-05 09:27:47 -04002233 make
2234
2235 msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C and MBEDTLS_MEMORY_BACKTRACE"
2236 make test
2237}
2238
2239component_test_memory_buffer_allocator () {
2240 msg "build: default config with memory buffer allocator"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002241 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
2242 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
Gilles Peskinee7fc7ef2021-10-19 21:33:32 +02002243 CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release .
Hanno Becker0fb9ba22019-02-26 14:34:13 +00002244 make
2245
2246 msg "test: MBEDTLS_MEMORY_BUFFER_ALLOC_C"
2247 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01002248
2249 msg "test: ssl-opt.sh, MBEDTLS_MEMORY_BUFFER_ALLOC_C"
2250 # MBEDTLS_MEMORY_BUFFER_ALLOC is slow. Skip tests that tend to time out.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002251 tests/ssl-opt.sh -e '^DTLS proxy'
Hanno Becker0fb9ba22019-02-26 14:34:13 +00002252}
2253
Gilles Peskine8f073122018-11-27 15:58:47 +01002254component_test_no_max_fragment_length () {
2255 # Run max fragment length tests with MFL disabled
2256 msg "build: default config except MFL extension (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002257 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Gilles Peskine8f073122018-11-27 15:58:47 +01002258 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2259 make
Hanno Becker5175ac62017-09-18 15:36:25 +01002260
Gilles Peskine8f073122018-11-27 15:58:47 +01002261 msg "test: ssl-opt.sh, MFL-related tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002262 tests/ssl-opt.sh -f "Max fragment length"
Gilles Peskine8f073122018-11-27 15:58:47 +01002263}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00002264
Hanno Becker545ced42019-02-19 11:10:48 +00002265component_test_asan_remove_peer_certificate () {
2266 msg "build: default config with MBEDTLS_SSL_KEEP_PEER_CERTIFICATE disabled (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002267 scripts/config.py unset MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
Hanno Becker545ced42019-02-19 11:10:48 +00002268 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2269 make
2270
2271 msg "test: !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
2272 make test
2273
2274 msg "test: ssl-opt.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002275 tests/ssl-opt.sh
Hanno Becker545ced42019-02-19 11:10:48 +00002276
2277 msg "test: compat.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002278 tests/compat.sh
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02002279
2280 msg "test: context-info.sh, !MBEDTLS_SSL_KEEP_PEER_CERTIFICATE"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002281 tests/context-info.sh
Hanno Becker545ced42019-02-19 11:10:48 +00002282}
2283
Gilles Peskine8f073122018-11-27 15:58:47 +01002284component_test_no_max_fragment_length_small_ssl_out_content_len () {
2285 msg "build: no MFL extension, small SSL_OUT_CONTENT_LEN (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002286 scripts/config.py unset MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2287 scripts/config.py set MBEDTLS_SSL_IN_CONTENT_LEN 16384
2288 scripts/config.py set MBEDTLS_SSL_OUT_CONTENT_LEN 4096
Gilles Peskine8f073122018-11-27 15:58:47 +01002289 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2290 make
Angus Grattonc4dd0732018-04-11 16:28:39 +10002291
Gilles Peskine8f073122018-11-27 15:58:47 +01002292 msg "test: MFL tests (disabled MFL extension case) & large packet tests"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002293 tests/ssl-opt.sh -f "Max fragment length\|Large buffer"
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02002294
2295 msg "test: context-info.sh (disabled MFL extension case)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002296 tests/context-info.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01002297}
Angus Grattonc4dd0732018-04-11 16:28:39 +10002298
Darryl Greenaad82f92019-12-02 10:53:11 +00002299component_test_variable_ssl_in_out_buffer_len () {
2300 msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled (ASan build)"
2301 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
2302 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2303 make
2304
2305 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
2306 make test
2307
2308 msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002309 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002310
2311 msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002312 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002313}
2314
2315component_test_variable_ssl_in_out_buffer_len_CID () {
2316 msg "build: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled (ASan build)"
2317 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
2318 scripts/config.py set MBEDTLS_SSL_DTLS_CONNECTION_ID
2319
2320 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2321 make
2322
2323 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID"
2324 make test
2325
2326 msg "test: ssl-opt.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002327 tests/ssl-opt.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002328
2329 msg "test: compat.sh, MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH and MBEDTLS_SSL_DTLS_CONNECTION_ID enabled"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002330 tests/compat.sh
Darryl Greenaad82f92019-12-02 10:53:11 +00002331}
2332
Andrzej Kurek324f72e2021-09-29 04:21:21 -04002333component_test_CID_no_debug() {
2334 msg "build: Connection ID enabled, debug disabled"
2335 scripts/config.py unset MBEDTLS_DEBUG_C
2336 scripts/config.py set MBEDTLS_SSL_DTLS_CONNECTION_ID
2337
2338 CC=gcc cmake .
2339 make
2340
2341 msg "test: Connection ID enabled, debug disabled"
2342 make test
2343}
2344
Piotr Nowicki0937ed22019-11-26 16:32:40 +01002345component_test_ssl_alloc_buffer_and_mfl () {
2346 msg "build: default config with memory buffer allocator and MFL extension"
2347 scripts/config.py set MBEDTLS_MEMORY_BUFFER_ALLOC_C
2348 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
2349 scripts/config.py set MBEDTLS_MEMORY_DEBUG
2350 scripts/config.py set MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2351 scripts/config.py set MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Gilles Peskinee7fc7ef2021-10-19 21:33:32 +02002352 CC=gcc cmake -DCMAKE_BUILD_TYPE:String=Release .
Piotr Nowicki0937ed22019-11-26 16:32:40 +01002353 make
2354
2355 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH"
2356 make test
2357
2358 msg "test: MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH, MBEDTLS_MEMORY_BUFFER_ALLOC_C, MBEDTLS_MEMORY_DEBUG and MBEDTLS_SSL_MAX_FRAGMENT_LENGTH"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002359 tests/ssl-opt.sh -f "Handshake memory usage"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01002360}
2361
Gilles Peskine636c26a2020-03-04 20:46:15 +01002362component_test_when_no_ciphersuites_have_mac () {
2363 msg "build: when no ciphersuites have MAC"
2364 scripts/config.py unset MBEDTLS_CIPHER_NULL_CIPHER
Gilles Peskine636c26a2020-03-04 20:46:15 +01002365 scripts/config.py unset MBEDTLS_CIPHER_MODE_CBC
TRodziewicz2add5c12021-04-28 16:50:20 +02002366 scripts/config.py unset MBEDTLS_CMAC_C
Gilles Peskine636c26a2020-03-04 20:46:15 +01002367 make
2368
2369 msg "test: !MBEDTLS_SSL_SOME_MODES_USE_MAC"
2370 make test
2371
2372 msg "test ssl-opt.sh: !MBEDTLS_SSL_SOME_MODES_USE_MAC"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002373 tests/ssl-opt.sh -f 'Default\|EtM' -e 'without EtM'
Gilles Peskine636c26a2020-03-04 20:46:15 +01002374}
2375
Raoul Strackxa4e86142020-06-15 17:03:13 +02002376component_test_no_date_time () {
2377 msg "build: default config without MBEDTLS_HAVE_TIME_DATE"
2378 scripts/config.py unset MBEDTLS_HAVE_TIME_DATE
Gilles Peskinef4d2fd42021-10-08 11:45:47 +02002379 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Check .
Raoul Strackxa4e86142020-06-15 17:03:13 +02002380 make
2381
2382 msg "test: !MBEDTLS_HAVE_TIME_DATE - main suites"
2383 make test
2384}
2385
Gilles Peskine8f073122018-11-27 15:58:47 +01002386component_test_platform_calloc_macro () {
2387 msg "build: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002388 scripts/config.py set MBEDTLS_PLATFORM_MEMORY
2389 scripts/config.py set MBEDTLS_PLATFORM_CALLOC_MACRO calloc
2390 scripts/config.py set MBEDTLS_PLATFORM_FREE_MACRO free
Gilles Peskine8f073122018-11-27 15:58:47 +01002391 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2392 make
Hanno Beckere5fecec2018-10-11 11:02:52 +01002393
Gilles Peskine8f073122018-11-27 15:58:47 +01002394 msg "test: MBEDTLS_PLATFORM_{CALLOC/FREE}_MACRO enabled (ASan build)"
2395 make test
2396}
Hanno Beckere5fecec2018-10-11 11:02:52 +01002397
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02002398component_test_malloc_0_null () {
2399 msg "build: malloc(0) returns NULL (ASan+UBSan build)"
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01002400 scripts/config.py full
Gilles Peskine004206c2019-10-21 17:11:33 +02002401 make CC=gcc CFLAGS="'-DMBEDTLS_CONFIG_FILE=\"$PWD/tests/configs/config-wrapper-malloc-0-null.h\"' $ASAN_CFLAGS -O" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02002402
2403 msg "test: malloc(0) returns NULL (ASan+UBSan build)"
2404 make test
2405
2406 msg "selftest: malloc(0) returns NULL (ASan+UBSan build)"
2407 # Just the calloc selftest. "make test" ran the others as part of the
2408 # test suites.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002409 programs/test/selftest calloc
Gilles Peskine765d2402020-02-11 18:26:34 +01002410
2411 msg "test ssl-opt.sh: malloc(0) returns NULL (ASan+UBSan build)"
2412 # Run a subset of the tests. The choice is a balance between coverage
2413 # and time (including time indirectly wasted due to flaky tests).
2414 # The current choice is to skip tests whose description includes
2415 # "proxy", which is an approximation of skipping tests that use the
2416 # UDP proxy, which tend to be slower and flakier.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002417 tests/ssl-opt.sh -e 'proxy'
Gilles Peskinec4ef7a92019-09-17 19:04:38 +02002418}
2419
Gilles Peskine8f073122018-11-27 15:58:47 +01002420component_test_aes_fewer_tables () {
2421 msg "build: default config with AES_FEWER_TABLES enabled"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002422 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
Gilles Peskine8f073122018-11-27 15:58:47 +01002423 make CC=gcc CFLAGS='-Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01002424
Gilles Peskine8f073122018-11-27 15:58:47 +01002425 msg "test: AES_FEWER_TABLES"
2426 make test
2427}
Hanno Becker83ebf782017-07-07 12:29:15 +01002428
Gilles Peskine8f073122018-11-27 15:58:47 +01002429component_test_aes_rom_tables () {
2430 msg "build: default config with AES_ROM_TABLES enabled"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002431 scripts/config.py set MBEDTLS_AES_ROM_TABLES
Gilles Peskine8f073122018-11-27 15:58:47 +01002432 make CC=gcc CFLAGS='-Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01002433
Gilles Peskine8f073122018-11-27 15:58:47 +01002434 msg "test: AES_ROM_TABLES"
2435 make test
2436}
Hanno Becker83ebf782017-07-07 12:29:15 +01002437
Gilles Peskine8f073122018-11-27 15:58:47 +01002438component_test_aes_fewer_tables_and_rom_tables () {
2439 msg "build: default config with AES_ROM_TABLES and AES_FEWER_TABLES enabled"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002440 scripts/config.py set MBEDTLS_AES_FEWER_TABLES
2441 scripts/config.py set MBEDTLS_AES_ROM_TABLES
Gilles Peskine8f073122018-11-27 15:58:47 +01002442 make CC=gcc CFLAGS='-Werror -Wall -Wextra'
Hanno Becker83ebf782017-07-07 12:29:15 +01002443
Gilles Peskine8f073122018-11-27 15:58:47 +01002444 msg "test: AES_FEWER_TABLES + AES_ROM_TABLES"
2445 make test
2446}
2447
Gilles Peskine592f5912019-10-07 18:49:32 +02002448component_test_ctr_drbg_aes_256_sha_256 () {
2449 msg "build: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01002450 scripts/config.py full
2451 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
2452 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
Gilles Peskine592f5912019-10-07 18:49:32 +02002453 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2454 make
2455
2456 msg "test: full + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
2457 make test
2458}
2459
2460component_test_ctr_drbg_aes_128_sha_512 () {
2461 msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01002462 scripts/config.py full
2463 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
2464 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
Gilles Peskine592f5912019-10-07 18:49:32 +02002465 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2466 make
2467
2468 msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY (ASan build)"
2469 make test
2470}
2471
2472component_test_ctr_drbg_aes_128_sha_256 () {
2473 msg "build: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
Gilles Peskine3b46cd32020-02-18 17:56:33 +01002474 scripts/config.py full
2475 scripts/config.py unset MBEDTLS_MEMORY_BUFFER_ALLOC_C
2476 scripts/config.py set MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
2477 scripts/config.py set MBEDTLS_ENTROPY_FORCE_SHA256
Gilles Peskine592f5912019-10-07 18:49:32 +02002478 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2479 make
2480
2481 msg "test: full + MBEDTLS_CTR_DRBG_USE_128_BIT_KEY + MBEDTLS_ENTROPY_FORCE_SHA256 (ASan build)"
2482 make test
2483}
2484
Gilles Peskinef96aefe2019-07-24 14:58:38 +02002485component_test_se_default () {
2486 msg "build: default config + MBEDTLS_PSA_CRYPTO_SE_C"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002487 scripts/config.py set MBEDTLS_PSA_CRYPTO_SE_C
Gilles Peskine004206c2019-10-21 17:11:33 +02002488 make CC=clang CFLAGS="$ASAN_CFLAGS -Os" LDFLAGS="$ASAN_CFLAGS"
Gilles Peskinef96aefe2019-07-24 14:58:38 +02002489
2490 msg "test: default config + MBEDTLS_PSA_CRYPTO_SE_C"
2491 make test
2492}
2493
Steven Cooremand57203d2020-07-16 20:28:59 +02002494component_test_psa_crypto_drivers () {
Steven Cooreman55ae2172020-07-17 19:46:15 +02002495 msg "build: MBEDTLS_PSA_CRYPTO_DRIVERS w/ driver hooks"
Steven Cooreman753f9732021-03-15 11:38:44 +01002496 scripts/config.py full
Steven Cooremand57203d2020-07-16 20:28:59 +02002497 scripts/config.py set MBEDTLS_PSA_CRYPTO_DRIVERS
Steven Cooreman6801f082021-02-19 17:21:22 +01002498 scripts/config.py set MBEDTLS_PSA_CRYPTO_BUILTIN_KEYS
Gilles Peskine3587dfd2021-09-20 19:20:04 +02002499 loc_cflags="$ASAN_CFLAGS -DPSA_CRYPTO_DRIVER_TEST_ALL"
2500 loc_cflags="${loc_cflags} '-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/user-config-for-test.h\"'"
Ronald Cron17b3afc2020-12-10 18:17:09 +01002501 loc_cflags="${loc_cflags} -I../tests/include -O2"
2502
2503 make CC=gcc CFLAGS="${loc_cflags}" LDFLAGS="$ASAN_CFLAGS"
Steven Cooremand57203d2020-07-16 20:28:59 +02002504
Steven Cooreman753f9732021-03-15 11:38:44 +01002505 msg "test: full + MBEDTLS_PSA_CRYPTO_DRIVERS"
Steven Cooremand57203d2020-07-16 20:28:59 +02002506 make test
2507}
2508
Gilles Peskine8f073122018-11-27 15:58:47 +01002509component_test_make_shared () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002510 msg "build/test: make shared" # ~ 40s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04002511 make SHARED=1 all check
Gilles Peskine56c01612019-07-03 20:43:32 +02002512 ldd programs/util/strerror | grep libmbedcrypto
Gilles Peskineca144592021-11-04 12:52:14 +01002513 programs/test/dlopen_demo.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01002514}
Manuel Pégourié-Gonnard9b06abe2015-06-25 09:56:07 +02002515
Gilles Peskinecf740502019-07-03 20:43:05 +02002516component_test_cmake_shared () {
2517 msg "build/test: cmake shared" # ~ 2min
2518 cmake -DUSE_SHARED_MBEDTLS_LIBRARY=On .
2519 make
Gilles Peskine56c01612019-07-03 20:43:32 +02002520 ldd programs/util/strerror | grep libmbedcrypto
Gilles Peskinecf740502019-07-03 20:43:05 +02002521 make test
Gilles Peskineca144592021-11-04 12:52:14 +01002522 programs/test/dlopen_demo.sh
Gilles Peskinecf740502019-07-03 20:43:05 +02002523}
2524
Gilles Peskineec10bf12019-09-20 19:56:06 +02002525test_build_opt () {
2526 info=$1 cc=$2; shift 2
2527 for opt in "$@"; do
2528 msg "build/test: $cc $opt, $info" # ~ 30s
Gilles Peskinee094a182020-04-14 20:08:41 +02002529 make CC="$cc" CFLAGS="$opt -std=c99 -pedantic -Wall -Wextra -Werror"
Gilles Peskineec10bf12019-09-20 19:56:06 +02002530 # We're confident enough in compilers to not run _all_ the tests,
2531 # but at least run the unit tests. In particular, runs with
2532 # optimizations use inline assembly whereas runs with -O0
2533 # skip inline assembly.
2534 make test # ~30s
2535 make clean
2536 done
2537}
2538
2539component_test_clang_opt () {
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01002540 scripts/config.py full
Gilles Peskineec10bf12019-09-20 19:56:06 +02002541 test_build_opt 'full config' clang -O0 -Os -O2
2542}
2543
2544component_test_gcc_opt () {
Manuel Pégourié-Gonnard68192fc2020-03-04 10:34:47 +01002545 scripts/config.py full
Gilles Peskineec10bf12019-09-20 19:56:06 +02002546 test_build_opt 'full config' gcc -O0 -Os -O2
2547}
2548
Gilles Peskineabf9b4d2019-07-03 20:42:16 +02002549component_build_mbedtls_config_file () {
2550 msg "build: make with MBEDTLS_CONFIG_FILE" # ~40s
2551 # Use the full config so as to catch a maximum of places where
2552 # the check of MBEDTLS_CONFIG_FILE might be missing.
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002553 scripts/config.py full
Gilles Peskineabf9b4d2019-07-03 20:42:16 +02002554 sed 's!"check_config.h"!"mbedtls/check_config.h"!' <"$CONFIG_H" >full_config.h
2555 echo '#error "MBEDTLS_CONFIG_FILE is not working"' >"$CONFIG_H"
2556 make CFLAGS="-I '$PWD' -DMBEDTLS_CONFIG_FILE='\"full_config.h\"'"
2557 rm -f full_config.h
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00002558}
2559
Gilles Peskine8f073122018-11-27 15:58:47 +01002560component_test_m32_o0 () {
Gilles Peskine77f05352021-10-07 19:27:16 +02002561 # Build without optimization, so as to use portable C code (in a 32-bit
2562 # build) and not the i386-specific inline assembly.
Simon Butcher8e6a22a2018-07-20 21:27:33 +01002563 msg "build: i386, make, gcc -O0 (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002564 scripts/config.py full
Gilles Peskine8fd59422019-10-21 17:11:33 +02002565 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O0" LDFLAGS="-m32 $ASAN_CFLAGS"
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01002566
Simon Butcher8e6a22a2018-07-20 21:27:33 +01002567 msg "test: i386, make, gcc -O0 (ASan build)"
2568 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01002569}
Gilles Peskine878cf602019-01-06 20:50:38 +00002570support_test_m32_o0 () {
2571 case $(uname -m) in
2572 *64*) true;;
2573 *) false;;
2574 esac
2575}
Simon Butcher8e6a22a2018-07-20 21:27:33 +01002576
Gilles Peskineff0aee02021-10-05 09:36:03 +02002577component_test_m32_o2 () {
2578 # Build with optimization, to use the i386 specific inline assembly
2579 # and go faster for tests.
2580 msg "build: i386, make, gcc -O2 (ASan build)" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002581 scripts/config.py full
Gilles Peskineff0aee02021-10-05 09:36:03 +02002582 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O2" LDFLAGS="-m32 $ASAN_CFLAGS"
Simon Butcher8e6a22a2018-07-20 21:27:33 +01002583
Gilles Peskineff0aee02021-10-05 09:36:03 +02002584 msg "test: i386, make, gcc -O2 (ASan build)"
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01002585 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01002586
Gilles Peskineff0aee02021-10-05 09:36:03 +02002587 msg "test ssl-opt.sh, i386, make, gcc-O2"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002588 tests/ssl-opt.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01002589}
Gilles Peskinecf522222021-10-07 19:25:29 +02002590support_test_m32_o2 () {
Gilles Peskine878cf602019-01-06 20:50:38 +00002591 support_test_m32_o0 "$@"
2592}
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01002593
Gilles Peskine0c6b7992019-04-12 20:29:48 +02002594component_test_m32_everest () {
2595 msg "build: i386, Everest ECDH context (ASan build)" # ~ 6 min
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002596 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
Gilles Peskine8fd59422019-10-21 17:11:33 +02002597 make CC=gcc CFLAGS="$ASAN_CFLAGS -m32 -O2" LDFLAGS="-m32 $ASAN_CFLAGS"
Gilles Peskine0c6b7992019-04-12 20:29:48 +02002598
2599 msg "test: i386, Everest ECDH context - main suites (inc. selftests) (ASan build)" # ~ 50s
2600 make test
Gilles Peskine636c26a2020-03-04 20:46:15 +01002601
2602 msg "test: i386, Everest ECDH context - ECDH-related part of ssl-opt.sh (ASan build)" # ~ 5s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002603 tests/ssl-opt.sh -f ECDH
Gilles Peskine636c26a2020-03-04 20:46:15 +01002604
2605 msg "test: i386, Everest ECDH context - compat.sh with some ECDH ciphersuites (ASan build)" # ~ 3 min
2606 # Exclude some symmetric ciphers that are redundant here to gain time.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002607 tests/compat.sh -f ECDH -V NO -e 'ARIA\|CAMELLIA\|CHACHA\|DES'
Gilles Peskine0c6b7992019-04-12 20:29:48 +02002608}
2609support_test_m32_everest () {
2610 support_test_m32_o0 "$@"
2611}
2612
Gilles Peskine8f073122018-11-27 15:58:47 +01002613component_test_mx32 () {
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01002614 msg "build: 64-bit ILP32, make, gcc" # ~ 30s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002615 scripts/config.py full
Gilles Peskine5d26e7c2019-06-07 14:50:09 +02002616 make CC=gcc CFLAGS='-Werror -Wall -Wextra -mx32' LDFLAGS='-mx32'
Andres Amaya Garciaf4fbdda2017-05-08 11:19:19 +01002617
2618 msg "test: 64-bit ILP32, make, gcc"
2619 make test
Gilles Peskine8f073122018-11-27 15:58:47 +01002620}
Gilles Peskine878cf602019-01-06 20:50:38 +00002621support_test_mx32 () {
2622 case $(uname -m) in
2623 amd64|x86_64) true;;
2624 *) false;;
2625 esac
2626}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00002627
Peter Kolbus60c6da22018-12-27 06:59:04 -06002628component_test_min_mpi_window_size () {
2629 msg "build: Default + MBEDTLS_MPI_WINDOW_SIZE=1 (ASan build)" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002630 scripts/config.py set MBEDTLS_MPI_WINDOW_SIZE 1
Peter Kolbus60c6da22018-12-27 06:59:04 -06002631 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2632 make
2633
2634 msg "test: MBEDTLS_MPI_WINDOW_SIZE=1 - main suites (inc. selftests) (ASan build)" # ~ 10s
2635 make test
2636}
2637
Gilles Peskine8f073122018-11-27 15:58:47 +01002638component_test_have_int32 () {
2639 msg "build: gcc, force 32-bit bignum limbs"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002640 scripts/config.py unset MBEDTLS_HAVE_ASM
2641 scripts/config.py unset MBEDTLS_AESNI_C
2642 scripts/config.py unset MBEDTLS_PADLOCK_C
Gilles Peskine8f073122018-11-27 15:58:47 +01002643 make CC=gcc CFLAGS='-Werror -Wall -Wextra -DMBEDTLS_HAVE_INT32'
Andres Amaya Garcia84e6ce82017-05-04 11:35:51 +01002644
Gilles Peskine8f073122018-11-27 15:58:47 +01002645 msg "test: gcc, force 32-bit bignum limbs"
2646 make test
2647}
Andres Amaya Garciafe843a32017-07-20 13:21:34 +01002648
Gilles Peskine8f073122018-11-27 15:58:47 +01002649component_test_have_int64 () {
2650 msg "build: gcc, force 64-bit bignum limbs"
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002651 scripts/config.py unset MBEDTLS_HAVE_ASM
2652 scripts/config.py unset MBEDTLS_AESNI_C
2653 scripts/config.py unset MBEDTLS_PADLOCK_C
Gilles Peskine8f073122018-11-27 15:58:47 +01002654 make CC=gcc CFLAGS='-Werror -Wall -Wextra -DMBEDTLS_HAVE_INT64'
Gilles Peskine14c3c062018-01-29 21:25:12 +01002655
Gilles Peskine8f073122018-11-27 15:58:47 +01002656 msg "test: gcc, force 64-bit bignum limbs"
2657 make test
2658}
Manuel Pégourié-Gonnardedb2dc92015-02-10 14:36:31 +00002659
Gilles Peskine8f073122018-11-27 15:58:47 +01002660component_test_no_udbl_division () {
2661 msg "build: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002662 scripts/config.py full
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002663 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
Gilles Peskine8f073122018-11-27 15:58:47 +01002664 make CFLAGS='-Werror -O1'
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002665
Gilles Peskine8f073122018-11-27 15:58:47 +01002666 msg "test: MBEDTLS_NO_UDBL_DIVISION native" # ~ 10s
2667 make test
2668}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002669
Gilles Peskine8f073122018-11-27 15:58:47 +01002670component_test_no_64bit_multiplication () {
2671 msg "build: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002672 scripts/config.py full
Gilles Peskine3bdd4122019-07-27 23:52:53 +02002673 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
Gilles Peskine8f073122018-11-27 15:58:47 +01002674 make CFLAGS='-Werror -O1'
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002675
Gilles Peskine8f073122018-11-27 15:58:47 +01002676 msg "test: MBEDTLS_NO_64BIT_MULTIPLICATION native" # ~ 10s
2677 make test
2678}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002679
Gilles Peskine3809f5f2020-11-09 15:40:05 +01002680component_test_no_strings () {
2681 msg "build: no strings" # ~10s
2682 scripts/config.py full
2683 # Disable options that activate a large amount of string constants.
2684 scripts/config.py unset MBEDTLS_DEBUG_C
2685 scripts/config.py unset MBEDTLS_ERROR_C
2686 scripts/config.py set MBEDTLS_ERROR_STRERROR_DUMMY
2687 scripts/config.py unset MBEDTLS_VERSION_FEATURES
2688 make CFLAGS='-Werror -Os'
2689
2690 msg "test: no strings" # ~ 10s
2691 make test
2692}
2693
Hanno Beckerc5722d12020-10-09 11:10:42 +01002694component_test_no_x509_info () {
2695 msg "build: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s
2696 scripts/config.pl full
2697 scripts/config.pl unset MBEDTLS_MEMORY_BACKTRACE # too slow for tests
2698 scripts/config.pl set MBEDTLS_X509_REMOVE_INFO
Gilles Peskineff0aee02021-10-05 09:36:03 +02002699 make CFLAGS='-Werror -O2'
Hanno Beckerc5722d12020-10-09 11:10:42 +01002700
2701 msg "test: full + MBEDTLS_X509_REMOVE_INFO" # ~ 10s
2702 make test
2703
2704 msg "test: ssl-opt.sh, full + MBEDTLS_X509_REMOVE_INFO" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002705 tests/ssl-opt.sh
Hanno Beckerc5722d12020-10-09 11:10:42 +01002706}
2707
Gilles Peskine8f073122018-11-27 15:58:47 +01002708component_build_arm_none_eabi_gcc () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02002709 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002710 scripts/config.py baremetal
Gilles Peskineaeedd742020-09-02 11:03:04 +02002711 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -O1' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02002712
Gilles Peskinee36fe812021-09-01 20:00:33 +02002713 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -O1, baremetal+debug"
Gilles Peskine18487f62020-04-30 23:11:54 +02002714 ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01002715}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002716
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02002717component_build_arm_linux_gnueabi_gcc_arm5vte () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02002718 msg "build: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002719 scripts/config.py baremetal
Gilles Peskine2c897d72019-08-09 16:05:05 +02002720 # Build for a target platform that's close to what Debian uses
2721 # for its "armel" distribution (https://wiki.debian.org/ArmEabiPort).
Dave Rodgman017a1992022-03-31 14:07:01 +01002722 # See https://github.com/Mbed-TLS/mbedtls/pull/2169 and comments.
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02002723 # Build everything including programs, see for example
Dave Rodgman017a1992022-03-31 14:07:01 +01002724 # https://github.com/Mbed-TLS/mbedtls/pull/3449#issuecomment-675313720
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02002725 make CC="${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc" AR="${ARM_LINUX_GNUEABI_GCC_PREFIX}ar" CFLAGS='-Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te'
2726
Gilles Peskinee36fe812021-09-01 20:00:33 +02002727 msg "size: ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug"
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02002728 ${ARM_LINUX_GNUEABI_GCC_PREFIX}size library/*.o
2729}
2730support_build_arm_linux_gnueabi_gcc_arm5vte () {
2731 type ${ARM_LINUX_GNUEABI_GCC_PREFIX}gcc >/dev/null 2>&1
2732}
2733
2734component_build_arm_none_eabi_gcc_arm5vte () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02002735 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=arm5vte, baremetal+debug" # ~ 10s
Manuel Pégourié-Gonnard3a6c7692020-08-18 10:28:51 +02002736 scripts/config.py baremetal
2737 # This is an imperfect substitute for
2738 # component_build_arm_linux_gnueabi_gcc_arm5vte
Manuel Pégourié-Gonnardae505ee2021-07-06 09:44:59 +02002739 # in case the gcc-arm-linux-gnueabi toolchain is not available
Gilles Peskineaeedd742020-09-02 11:03:04 +02002740 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" CFLAGS='-std=c99 -Werror -Wall -Wextra -march=armv5te -O1' LDFLAGS='-march=armv5te' SHELL='sh -x' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02002741
Gilles Peskinee36fe812021-09-01 20:00:33 +02002742 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -march=armv5te -O1, baremetal+debug"
Gilles Peskine18487f62020-04-30 23:11:54 +02002743 ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o
Gilles Peskine93e4e032019-08-05 11:34:25 +02002744}
2745
Gilles Peskine6e2fb862020-04-30 23:00:53 +02002746component_build_arm_none_eabi_gcc_m0plus () {
Gilles Peskinee36fe812021-09-01 20:00:33 +02002747 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus, baremetal_size" # ~ 10s
2748 scripts/config.py baremetal_size
Gilles Peskineaeedd742020-09-02 11:03:04 +02002749 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra -mthumb -mcpu=cortex-m0plus -Os' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02002750
Gilles Peskinee36fe812021-09-01 20:00:33 +02002751 msg "size: ${ARM_NONE_EABI_GCC_PREFIX}gcc -mthumb -mcpu=cortex-m0plus -Os, baremetal_size"
Gilles Peskine18487f62020-04-30 23:11:54 +02002752 ${ARM_NONE_EABI_GCC_PREFIX}size library/*.o
Gilles Peskine6e2fb862020-04-30 23:00:53 +02002753}
2754
Gilles Peskine8f073122018-11-27 15:58:47 +01002755component_build_arm_none_eabi_gcc_no_udbl_division () {
Gilles Peskine6d061342020-04-30 18:19:32 +02002756 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc -DMBEDTLS_NO_UDBL_DIVISION, make" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002757 scripts/config.py baremetal
2758 scripts/config.py set MBEDTLS_NO_UDBL_DIVISION
Gilles Peskineaeedd742020-09-02 11:03:04 +02002759 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -Wall -Wextra' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01002760 echo "Checking that software 64-bit division is not required"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002761 not grep __aeabi_uldiv library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01002762}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002763
Gilles Peskine8f073122018-11-27 15:58:47 +01002764component_build_arm_none_eabi_gcc_no_64bit_multiplication () {
Gilles Peskine6d061342020-04-30 18:19:32 +02002765 msg "build: ${ARM_NONE_EABI_GCC_PREFIX}gcc MBEDTLS_NO_64BIT_MULTIPLICATION, make" # ~ 10s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002766 scripts/config.py baremetal
2767 scripts/config.py set MBEDTLS_NO_64BIT_MULTIPLICATION
Gilles Peskineaeedd742020-09-02 11:03:04 +02002768 make CC="${ARM_NONE_EABI_GCC_PREFIX}gcc" AR="${ARM_NONE_EABI_GCC_PREFIX}ar" LD="${ARM_NONE_EABI_GCC_PREFIX}ld" CFLAGS='-std=c99 -Werror -O1 -march=armv6-m -mthumb' lib
Gilles Peskine8f073122018-11-27 15:58:47 +01002769 echo "Checking that software 64-bit multiplication is not required"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002770 not grep __aeabi_lmul library/*.o
Gilles Peskine8f073122018-11-27 15:58:47 +01002771}
Manuel Pégourié-Gonnard2adb3752018-06-07 10:51:44 +02002772
Gilles Peskine8f073122018-11-27 15:58:47 +01002773component_build_armcc () {
Gilles Peskine18487f62020-04-30 23:11:54 +02002774 msg "build: ARM Compiler 5"
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002775 scripts/config.py baremetal
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00002776 # armc[56] don't support SHA-512 intrinsics
2777 scripts/config.py unset MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT
2778
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002779 make CC="$ARMC5_CC" AR="$ARMC5_AR" WARNING_CFLAGS='--strict --c99' lib
Gilles Peskine18487f62020-04-30 23:11:54 +02002780
2781 msg "size: ARM Compiler 5"
2782 "$ARMC5_FROMELF" -z library/*.o
2783
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002784 make clean
Andres AG87bb5772016-09-27 15:05:15 +01002785
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002786 # ARM Compiler 6 - Target ARMv7-A
2787 armc6_build_test "--target=arm-arm-none-eabi -march=armv7-a"
Simon Butcher940737f2017-07-23 13:42:36 +02002788
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002789 # ARM Compiler 6 - Target ARMv7-M
2790 armc6_build_test "--target=arm-arm-none-eabi -march=armv7-m"
Simon Butcher940737f2017-07-23 13:42:36 +02002791
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002792 # ARM Compiler 6 - Target ARMv8-A - AArch32
2793 armc6_build_test "--target=arm-arm-none-eabi -march=armv8.2-a"
Simon Butcher940737f2017-07-23 13:42:36 +02002794
Gilles Peskinebca6ab92017-12-19 18:24:31 +01002795 # ARM Compiler 6 - Target ARMv8-M
2796 armc6_build_test "--target=arm-arm-none-eabi -march=armv8-m.main"
Simon Butcher940737f2017-07-23 13:42:36 +02002797
Tom Cosgrove87fbfb52022-03-15 10:51:52 +00002798 # ARM Compiler 6 - Target ARMv8.2-A - AArch64
Tom Cosgrovef3ebd902022-02-20 22:25:31 +00002799 armc6_build_test "--target=aarch64-arm-none-eabi -march=armv8.2-a+crypto"
Gilles Peskine8f073122018-11-27 15:58:47 +01002800}
Manuel Pégourié-Gonnardc5c59392015-02-10 17:38:54 +01002801
Jerry Yu81d5e1f2022-01-27 13:01:01 +08002802component_test_tls13_only () {
2803 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3, without MBEDTLS_SSL_PROTO_TLS1_2"
Jerry Yuda5af222021-12-24 18:45:45 +08002804 make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
2805
Jerry Yubaa49342022-02-15 10:26:40 +08002806 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without MBEDTLS_SSL_PROTO_TLS1_2"
2807 if_build_succeeded make test
2808
Jerry Yuda5af222021-12-24 18:45:45 +08002809 msg "ssl-opt.sh (TLS 1.3)"
2810 if_build_succeeded tests/ssl-opt.sh
2811}
2812
Ronald Cron6f135e12021-12-08 16:57:54 +01002813component_test_tls13 () {
2814 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
2815 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01002816 scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2817 scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1
2818 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2819 make
Ronald Cron6f135e12021-12-08 16:57:54 +01002820 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01002821 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01002822 msg "ssl-opt.sh (TLS 1.3)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01002823 tests/ssl-opt.sh
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01002824}
2825
Ronald Cron6f135e12021-12-08 16:57:54 +01002826component_test_tls13_no_compatibility_mode () {
2827 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
2828 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01002829 scripts/config.py unset MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2830 scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 1
Hanno Beckera711f6e2020-05-04 12:03:51 +01002831 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2832 make
Ronald Cron6f135e12021-12-08 16:57:54 +01002833 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
Hanno Becker6c53ecc2021-08-01 19:20:10 +01002834 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01002835 msg "ssl-opt.sh (TLS 1.3 no compatibility mode)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01002836 tests/ssl-opt.sh
Hanno Becker6c53ecc2021-08-01 19:20:10 +01002837}
2838
Ronald Cron6f135e12021-12-08 16:57:54 +01002839component_test_tls13_with_padding () {
2840 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with padding"
2841 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01002842 scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2843 scripts/config.py set MBEDTLS_SSL_CID_TLS1_3_PADDING_GRANULARITY 16
Hanno Becker6c53ecc2021-08-01 19:20:10 +01002844 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2845 make
Ronald Cron6f135e12021-12-08 16:57:54 +01002846 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with padding"
Hanno Beckera711f6e2020-05-04 12:03:51 +01002847 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01002848 msg "ssl-opt.sh (TLS 1.3 with padding)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01002849 tests/ssl-opt.sh
Hanno Beckera711f6e2020-05-04 12:03:51 +01002850}
2851
Ronald Cron6f135e12021-12-08 16:57:54 +01002852component_test_tls13_with_ecp_restartable () {
2853 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with ecp_restartable"
2854 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01002855 scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu7a5ab042021-09-15 19:22:29 +08002856 scripts/config.py set MBEDTLS_ECP_RESTARTABLE
2857 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2858 make
Ronald Cron6f135e12021-12-08 16:57:54 +01002859 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with ecp_restartable"
Jerry Yu7a5ab042021-09-15 19:22:29 +08002860 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01002861 msg "ssl-opt.sh (TLS 1.3 with ecp_restartable)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01002862 tests/ssl-opt.sh
Jerry Yu7a5ab042021-09-15 19:22:29 +08002863}
2864
Ronald Cron6f135e12021-12-08 16:57:54 +01002865component_test_tls13_with_everest () {
2866 msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with Everest"
2867 scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronfdb0e3f2021-12-09 10:39:19 +01002868 scripts/config.py set MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu7a5ab042021-09-15 19:22:29 +08002869 scripts/config.py set MBEDTLS_ECDH_VARIANT_EVEREST_ENABLED
2870 scripts/config.py unset MBEDTLS_ECP_RESTARTABLE
2871 CC=gcc cmake -D CMAKE_BUILD_TYPE:String=Asan .
2872 make
Ronald Cron6f135e12021-12-08 16:57:54 +01002873 msg "test: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, with Everest"
Jerry Yu7a5ab042021-09-15 19:22:29 +08002874 make test
Ronald Cron6f135e12021-12-08 16:57:54 +01002875 msg "ssl-opt.sh (TLS 1.3 with everest)"
Gilles Peskine827dbd92022-02-04 00:30:54 +01002876 tests/ssl-opt.sh
Jerry Yu7a5ab042021-09-15 19:22:29 +08002877}
2878
Gilles Peskine8f073122018-11-27 15:58:47 +01002879component_build_mingw () {
2880 msg "build: Windows cross build - mingw64, make (Link Library)" # ~ 30s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04002881 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 lib programs
Hanno Beckere963efa2018-01-03 10:03:43 +00002882
Gilles Peskine8f073122018-11-27 15:58:47 +01002883 # note Make tests only builds the tests, but doesn't run them
Andrzej Kurek232e8f92019-10-03 03:18:01 -04002884 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror' WINDOWS_BUILD=1 tests
Gilles Peskine8f073122018-11-27 15:58:47 +01002885 make WINDOWS_BUILD=1 clean
Gilles Peskine2a458da2017-05-12 15:26:58 +02002886
Gilles Peskine8f073122018-11-27 15:58:47 +01002887 msg "build: Windows cross build - mingw64, make (DLL)" # ~ 30s
Andrzej Kurek232e8f92019-10-03 03:18:01 -04002888 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 SHARED=1 lib programs
2889 make CC=i686-w64-mingw32-gcc AR=i686-w64-mingw32-ar LD=i686-w64-minggw32-ld CFLAGS='-Werror -Wall -Wextra' WINDOWS_BUILD=1 SHARED=1 tests
Gilles Peskine8f073122018-11-27 15:58:47 +01002890 make WINDOWS_BUILD=1 clean
2891}
Jaeden Amero117b8a42019-04-17 15:19:26 +01002892support_build_mingw() {
2893 case $(i686-w64-mingw32-gcc -dumpversion) in
2894 [0-5]*) false;;
2895 *) true;;
2896 esac
2897}
Simon Butcher91aef332016-11-17 09:20:50 +00002898
Gilles Peskine8f073122018-11-27 15:58:47 +01002899component_test_memsan () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002900 msg "build: MSan (clang)" # ~ 1 min 20s
Gilles Peskine5d46f6a2019-07-27 23:52:53 +02002901 scripts/config.py unset MBEDTLS_AESNI_C # memsan doesn't grok asm
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002902 CC=clang cmake -D CMAKE_BUILD_TYPE:String=MemSan .
2903 make
Manuel Pégourié-Gonnard4a9dc2a2014-05-09 13:46:59 +02002904
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002905 msg "test: main suites (MSan)" # ~ 10s
2906 make test
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01002907
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002908 msg "test: ssl-opt.sh (MSan)" # ~ 1 min
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002909 tests/ssl-opt.sh
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01002910
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002911 # Optional part(s)
Manuel Pégourié-Gonnard9bda9b32014-11-20 13:10:22 +01002912
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002913 if [ "$MEMORY" -gt 0 ]; then
2914 msg "test: compat.sh (MSan)" # ~ 6 min 20s
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002915 tests/compat.sh
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002916 fi
Gilles Peskine8f073122018-11-27 15:58:47 +01002917}
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01002918
Gilles Peskine69f190e2019-01-10 00:11:42 +01002919component_test_valgrind () {
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002920 msg "build: Release (clang)"
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002921 CC=clang cmake -D CMAKE_BUILD_TYPE:String=Release .
2922 make
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00002923
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002924 msg "test: main suites valgrind (Release)"
2925 make memcheck
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00002926
Gilles Peskine636c26a2020-03-04 20:46:15 +01002927 # Optional parts (slow; currently broken on OS X because programs don't
2928 # seem to receive signals under valgrind on OS X).
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002929 if [ "$MEMORY" -gt 0 ]; then
2930 msg "test: ssl-opt.sh --memcheck (Release)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002931 tests/ssl-opt.sh --memcheck
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002932 fi
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00002933
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002934 if [ "$MEMORY" -gt 1 ]; then
2935 msg "test: compat.sh --memcheck (Release)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002936 tests/compat.sh --memcheck
Gilles Peskine7ad603e2017-12-10 23:22:20 +01002937 fi
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02002938
2939 if [ "$MEMORY" -gt 0 ]; then
2940 msg "test: context-info.sh --memcheck (Release)"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002941 tests/context-info.sh --memcheck
Piotr Nowicki9978e6e2020-04-07 16:07:05 +02002942 fi
Gilles Peskine8f073122018-11-27 15:58:47 +01002943}
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00002944
Paul Elliott62dc3922021-11-25 17:29:40 +00002945support_test_cmake_out_of_source () {
2946 distrib_id=""
2947 distrib_ver=""
2948 distrib_ver_minor=""
2949 distrib_ver_major=""
2950
2951 # Attempt to parse lsb-release to find out distribution and version. If not
2952 # found this should fail safe (test is supported).
2953 if [[ -f /etc/lsb-release ]]; then
2954
2955 while read -r lsb_line; do
2956 case "$lsb_line" in
2957 "DISTRIB_ID"*) distrib_id=${lsb_line/#DISTRIB_ID=};;
2958 "DISTRIB_RELEASE"*) distrib_ver=${lsb_line/#DISTRIB_RELEASE=};;
2959 esac
2960 done < /etc/lsb-release
2961
2962 distrib_ver_major="${distrib_ver%%.*}"
2963 distrib_ver="${distrib_ver#*.}"
2964 distrib_ver_minor="${distrib_ver%%.*}"
2965 fi
2966
2967 # Running the out of source CMake test on Ubuntu 16.04 using more than one
2968 # processor (as the CI does) can create a race condition whereby the build
2969 # fails to see a generated file, despite that file actually having been
2970 # generated. This problem appears to go away with 18.04 or newer, so make
2971 # the out of source tests unsupported on Ubuntu 16.04.
2972 [ "$distrib_id" != "Ubuntu" ] || [ "$distrib_ver_major" -gt 16 ]
2973}
2974
Gilles Peskine8f073122018-11-27 15:58:47 +01002975component_test_cmake_out_of_source () {
2976 msg "build: cmake 'out-of-source' build"
Gilles Peskine8f073122018-11-27 15:58:47 +01002977 MBEDTLS_ROOT_DIR="$PWD"
2978 mkdir "$OUT_OF_SOURCE_DIR"
2979 cd "$OUT_OF_SOURCE_DIR"
Gilles Peskinedbf7b7e2021-10-07 19:34:57 +02002980 cmake -D CMAKE_BUILD_TYPE:String=Check "$MBEDTLS_ROOT_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +01002981 make
Manuel Pégourié-Gonnard392d3dd2015-01-26 14:03:56 +00002982
Gilles Peskine8f073122018-11-27 15:58:47 +01002983 msg "test: cmake 'out-of-source' build"
2984 make test
2985 # Test an SSL option that requires an auxiliary script in test/scripts/.
2986 # Also ensure that there are no error messages such as
2987 # "No such file or directory", which would indicate that some required
2988 # file is missing (ssl-opt.sh tolerates the absence of some files so
2989 # may exit with status 0 but emit errors).
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002990 ./tests/ssl-opt.sh -f 'Fallback SCSV: beginning of list' 2>ssl-opt.err
Gilles Peskinef7e956c2020-03-28 18:56:09 +01002991 cat ssl-opt.err >&2
2992 # If ssl-opt.err is non-empty, record an error and keep going.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02002993 [ ! -s ssl-opt.err ]
Gilles Peskinef7e956c2020-03-28 18:56:09 +01002994 rm ssl-opt.err
Gilles Peskine8f073122018-11-27 15:58:47 +01002995 cd "$MBEDTLS_ROOT_DIR"
2996 rm -rf "$OUT_OF_SOURCE_DIR"
Gilles Peskine8f073122018-11-27 15:58:47 +01002997}
Andres AGdc192212016-08-31 17:33:13 +01002998
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01002999component_test_cmake_as_subdirectory () {
3000 msg "build: cmake 'as-subdirectory' build"
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01003001 cd programs/test/cmake_subproject
3002 cmake .
3003 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003004 ./cmake_subproject
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01003005}
Gilles Peskinea3000992022-02-04 00:21:12 +01003006support_test_cmake_as_subdirectory () {
3007 support_test_cmake_out_of_source
Jaeden Ameroab83fdf2019-06-20 17:38:22 +01003008}
3009
Chris Kayd259e342021-03-25 16:03:25 +00003010component_test_cmake_as_package () {
3011 msg "build: cmake 'as-package' build"
Chris Kayd259e342021-03-25 16:03:25 +00003012 cd programs/test/cmake_package
3013 cmake .
3014 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003015 ./cmake_package
Chris Kayd259e342021-03-25 16:03:25 +00003016}
Gilles Peskinea3000992022-02-04 00:21:12 +01003017support_test_cmake_as_package () {
3018 support_test_cmake_out_of_source
Chris Kayd259e342021-03-25 16:03:25 +00003019}
3020
3021component_test_cmake_as_package_install () {
3022 msg "build: cmake 'as-installed-package' build"
Chris Kayd259e342021-03-25 16:03:25 +00003023 cd programs/test/cmake_package_install
3024 cmake .
3025 make
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003026 ./cmake_package_install
Chris Kayd259e342021-03-25 16:03:25 +00003027}
Gilles Peskinea3000992022-02-04 00:21:12 +01003028support_test_cmake_as_package_install () {
3029 support_test_cmake_out_of_source
Chris Kayd259e342021-03-25 16:03:25 +00003030}
3031
Gilles Peskine8f073122018-11-27 15:58:47 +01003032component_test_zeroize () {
3033 # Test that the function mbedtls_platform_zeroize() is not optimized away by
3034 # different combinations of compilers and optimization flags by using an
3035 # auxiliary GDB script. Unfortunately, GDB does not return error values to the
3036 # system in all cases that the script fails, so we must manually search the
3037 # output to check whether the pass string is present and no failure strings
3038 # were printed.
Andres AGdc192212016-08-31 17:33:13 +01003039
Gilles Peskine4976e822019-01-06 19:52:22 +00003040 # Don't try to disable ASLR. We don't care about ASLR here. We do care
3041 # about a spurious message if Gdb tries and fails, so suppress that.
3042 gdb_disable_aslr=
3043 if [ -z "$(gdb -batch -nw -ex 'set disable-randomization off' 2>&1)" ]; then
3044 gdb_disable_aslr='set disable-randomization off'
3045 fi
3046
Gilles Peskine8f073122018-11-27 15:58:47 +01003047 for optimization_flag in -O2 -O3 -Ofast -Os; do
Gilles Peskine55f7c942019-01-09 22:28:21 +01003048 for compiler in clang gcc; do
3049 msg "test: $compiler $optimization_flag, mbedtls_platform_zeroize()"
3050 make programs CC="$compiler" DEBUG=1 CFLAGS="$optimization_flag"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003051 gdb -ex "$gdb_disable_aslr" -x tests/scripts/test_zeroize.gdb -nw -batch -nx 2>&1 | tee test_zeroize.log
3052 grep "The buffer was correctly zeroized" test_zeroize.log
3053 not grep -i "error" test_zeroize.log
Gilles Peskine55f7c942019-01-09 22:28:21 +01003054 rm -f test_zeroize.log
3055 make clean
3056 done
Andres Amaya Garcia29673812017-10-25 10:35:51 +01003057 done
Gilles Peskine8f073122018-11-27 15:58:47 +01003058}
Gilles Peskine192c72f2017-12-21 15:59:21 +01003059
Bence Szépkúti80b31c52021-10-19 15:05:36 +02003060component_test_psa_compliance () {
3061 msg "build: make, default config (out-of-box), libmbedcrypto.a only"
Bence Szépkútica9236b2021-10-25 19:29:07 +02003062 make -C library libmbedcrypto.a
Bence Szépkúti80b31c52021-10-19 15:05:36 +02003063
3064 msg "unit test: test_psa_compliance.py"
3065 ./tests/scripts/test_psa_compliance.py
3066}
3067
3068support_test_psa_compliance () {
Bence Szépkútief0d02e2021-11-03 11:36:09 +01003069 # psa-compliance-tests only supports CMake >= 3.10.0
Bence Szépkútica9236b2021-10-25 19:29:07 +02003070 ver="$(cmake --version)"
3071 ver="${ver#cmake version }"
3072 ver_major="${ver%%.*}"
3073
3074 ver="${ver#*.}"
3075 ver_minor="${ver%%.*}"
3076
3077 [ "$ver_major" -eq 3 ] && [ "$ver_minor" -ge 10 ]
Bence Szépkúti80b31c52021-10-19 15:05:36 +02003078}
3079
Gilles Peskine8f073122018-11-27 15:58:47 +01003080component_check_python_files () {
3081 msg "Lint: Python scripts"
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003082 tests/scripts/check-python-files.sh
Gilles Peskine8f073122018-11-27 15:58:47 +01003083}
Gilles Peskine192c72f2017-12-21 15:59:21 +01003084
Joe Subbianid614c0b2021-07-29 11:18:29 +01003085component_check_test_helpers () {
3086 msg "unit test: generate_test_code.py"
Manuel Pégourié-Gonnarddfb114a2020-06-02 11:40:08 +02003087 # unittest writes out mundane stuff like number or tests run on stderr.
3088 # Our convention is to reserve stderr for actual errors, and write
3089 # harmless info on stdout so it can be suppress with --quiet.
Gilles Peskine1f0cdaf2021-07-08 18:41:16 +02003090 ./tests/scripts/test_generate_test_code.py 2>&1
Joe Subbianid614c0b2021-07-29 11:18:29 +01003091
Joe Subbiania25ffab2021-08-06 09:41:27 +01003092 msg "unit test: translate_ciphers.py"
3093 python3 -m unittest tests/scripts/translate_ciphers.py 2>&1
Gilles Peskine8f073122018-11-27 15:58:47 +01003094}
Gilles Peskine192c72f2017-12-21 15:59:21 +01003095
3096################################################################
3097#### Termination
3098################################################################
3099
Gilles Peskine8f073122018-11-27 15:58:47 +01003100post_report () {
3101 msg "Done, cleaning up"
Gilles Peskinef83eb822020-03-30 20:11:39 +02003102 final_cleanup
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01003103
Gilles Peskine8f073122018-11-27 15:58:47 +01003104 final_report
3105}
3106
3107
3108
3109################################################################
3110#### Run all the things
3111################################################################
3112
Gilles Peskine5d996822020-03-28 21:09:21 +01003113# Function invoked by --error-test to test error reporting.
3114pseudo_component_error_test () {
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02003115 msg "Testing error reporting $error_test_i"
Gilles Peskine5d996822020-03-28 21:09:21 +01003116 if [ $KEEP_GOING -ne 0 ]; then
3117 echo "Expect three failing commands."
3118 fi
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02003119 # If the component doesn't run in a subshell, changing error_test_i to an
3120 # invalid integer will cause an error in the loop that runs this function.
3121 error_test_i=this_should_not_be_used_since_the_component_runs_in_a_subshell
Gilles Peskineec135542021-08-02 23:14:03 +02003122 # Expected error: 'grep non_existent /dev/null -> 1'
Gilles Peskine5d996822020-03-28 21:09:21 +01003123 grep non_existent /dev/null
Gilles Peskineec135542021-08-02 23:14:03 +02003124 # Expected error: '! grep -q . tests/scripts/all.sh -> 1'
Gilles Peskine5d996822020-03-28 21:09:21 +01003125 not grep -q . "$0"
Gilles Peskineec135542021-08-02 23:14:03 +02003126 # Expected error: 'make unknown_target -> 2'
Gilles Peskine5d996822020-03-28 21:09:21 +01003127 make unknown_target
3128 false "this should not be executed"
3129}
3130
Gilles Peskinee48351a2018-11-27 16:06:30 +01003131# Run one component and clean up afterwards.
Gilles Peskine8f073122018-11-27 15:58:47 +01003132run_component () {
Gilles Peskineffcdeff2018-12-04 12:49:28 +01003133 current_component="$1"
Gilles Peskine9004a172019-09-16 15:20:36 +02003134 export MBEDTLS_TEST_CONFIGURATION="$current_component"
Gilles Peskine2ef377d2019-10-07 18:44:21 +02003135
3136 # Unconditionally create a seedfile that's sufficiently long.
3137 # Do this before each component, because a previous component may
3138 # have messed it up or shortened it.
Gilles Peskine88a07452021-07-08 19:03:50 +02003139 local dd_cmd
3140 dd_cmd=(dd if=/dev/urandom of=./tests/seedfile bs=64 count=1)
3141 case $OSTYPE in
Tom Cosgrove226aca12022-03-16 14:11:07 +00003142 linux*|freebsd*|openbsd*) dd_cmd+=(status=none)
Gilles Peskine88a07452021-07-08 19:03:50 +02003143 esac
3144 "${dd_cmd[@]}"
Gilles Peskine2ef377d2019-10-07 18:44:21 +02003145
Gilles Peskineec135542021-08-02 23:14:03 +02003146 # Run the component in a subshell, with error trapping and output
3147 # redirection set up based on the relevant options.
Gilles Peskinece266c42020-03-28 18:50:43 +01003148 if [ $KEEP_GOING -eq 1 ]; then
Gilles Peskineec135542021-08-02 23:14:03 +02003149 # We want to keep running if the subshell fails, so 'set -e' must
3150 # be off when the subshell runs.
Gilles Peskinece266c42020-03-28 18:50:43 +01003151 set +e
Manuel Pégourié-Gonnard2b2bdaa2020-06-02 11:28:07 +02003152 fi
Gilles Peskinece266c42020-03-28 18:50:43 +01003153 (
3154 if [ $QUIET -eq 1 ]; then
3155 # msg() will be silenced, so just print the component name here.
3156 echo "${current_component#component_}"
3157 exec >/dev/null
3158 fi
3159 if [ $KEEP_GOING -eq 1 ]; then
3160 # Keep "set -e" off, and run an ERR trap instead to record failures.
3161 set -E
3162 trap err_trap ERR
3163 fi
3164 # The next line is what runs the component
3165 "$@"
3166 if [ $KEEP_GOING -eq 1 ]; then
3167 trap - ERR
3168 exit $last_failure_status
3169 fi
3170 )
3171 component_status=$?
3172 if [ $KEEP_GOING -eq 1 ]; then
3173 set -e
3174 if [ $component_status -ne 0 ]; then
3175 failure_count=$((failure_count + 1))
3176 fi
3177 fi
Gilles Peskine2ef377d2019-10-07 18:44:21 +02003178
3179 # Restore the build tree to a clean state.
Gilles Peskinee48351a2018-11-27 16:06:30 +01003180 cleanup
Manuel Pégourié-Gonnard304b0992020-06-08 10:59:41 +02003181 unset current_component
Gilles Peskine8f073122018-11-27 15:58:47 +01003182}
3183
3184# Preliminary setup
3185pre_check_environment
3186pre_initialize_variables
3187pre_parse_command_line "$@"
Gilles Peskine348fb9a2018-11-27 17:04:29 +01003188
Gilles Peskine878cf602019-01-06 20:50:38 +00003189pre_check_git
Gilles Peskine568f53a2021-07-12 18:16:01 +02003190pre_restore_files
Gilles Peskinef83eb822020-03-30 20:11:39 +02003191pre_back_up
Andrzej Kurekeb508712019-02-14 07:18:59 -05003192
Gilles Peskine878cf602019-01-06 20:50:38 +00003193build_status=0
3194if [ $KEEP_GOING -eq 1 ]; then
3195 pre_setup_keep_going
Gilles Peskine8f073122018-11-27 15:58:47 +01003196fi
Gilles Peskine67ffdaf2019-09-16 15:55:46 +02003197pre_prepare_outcome_file
Gilles Peskine878cf602019-01-06 20:50:38 +00003198pre_print_configuration
3199pre_check_tools
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01003200cleanup
Gilles Peskine1570b592021-04-22 01:10:12 +02003201pre_generate_files
Manuel Pégourié-Gonnard80955ee2014-03-19 18:29:01 +01003202
Gilles Peskinebeb3a812019-01-06 22:11:25 +00003203# Run the requested tests.
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02003204for ((error_test_i=1; error_test_i <= error_test; error_test_i++)); do
Gilles Peskine5d996822020-03-28 21:09:21 +01003205 run_component pseudo_component_error_test
Gilles Peskine5d996822020-03-28 21:09:21 +01003206done
Gilles Peskine88a7c2b2021-08-02 23:28:00 +02003207unset error_test_i
Gilles Peskinebeb3a812019-01-06 22:11:25 +00003208for component in $RUN_COMPONENTS; do
3209 run_component "component_$component"
3210done
Gilles Peskine8f073122018-11-27 15:58:47 +01003211
3212# We're done.
Gilles Peskine878cf602019-01-06 20:50:38 +00003213post_report