Add -X flag for seperate pkcs11 uri for Certificate #247
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CI | |
| on: | |
| push: | |
| paths: | |
| - '*.c' | |
| - '*.cpp' | |
| - 'Makefile' | |
| - '.github/workflows/*' | |
| pull_request: | |
| paths: | |
| - '*.c' | |
| - '*.cpp' | |
| - 'Makefile' | |
| - '.github/workflows/*' | |
| workflow_dispatch: | |
| release: | |
| types: | |
| - created | |
| env: | |
| LIBPLIST_VERSION: 2.2.0 | |
| OPENSSL_VERSION: 3.0.5 | |
| SCCACHE_VERSION: 0.3.0 | |
| TRE_COMMIT: b4dcf71e274aa2ad6a4d879d366eb20826adfecc | |
| MMAN_COMMIT: 2d1c576e62b99e85d99407e1a88794c6e44c3310 | |
| jobs: | |
| build-linux: | |
| name: Build | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| triple: | |
| - aarch64-linux-musl | |
| - x86_64-linux-musl | |
| - x86_64-w64-mingw32 | |
| env: | |
| TOOLCHAIN: ${{ matrix.triple }}-cross | |
| TRIPLE: ${{ matrix.triple }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Restore or cache dependencies | |
| uses: actions/cache@v3 | |
| with: | |
| path: | | |
| ~/.cache/sccache | |
| ~/dep_src | |
| key: build-linux-${{ matrix.triple }}-${{ github.sha }} | |
| restore-keys: | | |
| build-linux-${{ matrix.triple }}- | |
| - name: Setup environment | |
| run: | | |
| export DOWNLOAD_PATH=${HOME}/dep_src | |
| export DEP_PATH=${HOME}/build | |
| mkdir -p ${DOWNLOAD_PATH} ${DEP_PATH} | |
| echo "DOWNLOAD_PATH=${DOWNLOAD_PATH}" >> $GITHUB_ENV | |
| echo "DEP_PATH=${DEP_PATH}" >> $GITHUB_ENV | |
| echo "ARCH=$(echo ${{ matrix.triple }} | cut -d- -f 1)" >> $GITHUB_ENV | |
| echo "OS=$(echo ${{ matrix.triple }} | cut -d- -f 2)" >> $GITHUB_ENV | |
| if [ "$(echo ${{ matrix.triple }} | cut -d- -f 2)" = "w64" ]; then | |
| echo "EXT=.exe" >> $GITHUB_ENV | |
| else | |
| echo "EXT=" >> $GITHUB_ENV | |
| fi | |
| - name: Setup toolchain | |
| run: | | |
| wget -nc -P ${DOWNLOAD_PATH} https://cameronkatri.com/toolchains/${TOOLCHAIN}.tgz | |
| wget -nc -P ${DOWNLOAD_PATH} https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz | |
| tar xf ${DOWNLOAD_PATH}/${TOOLCHAIN}.tgz -C ${HOME} | |
| tar xf ${DOWNLOAD_PATH}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl.tar.gz -C ${HOME} | |
| mv ${HOME}/sccache-v${SCCACHE_VERSION}-x86_64-unknown-linux-musl/sccache ${HOME}/${TOOLCHAIN}/bin | |
| chmod +x ${HOME}/${TOOLCHAIN}/bin/sccache | |
| echo "${HOME}/${TOOLCHAIN}/bin" >> $GITHUB_PATH | |
| echo "CC=sccache ${TRIPLE}-gcc" >> $GITHUB_ENV | |
| echo "CXX=sccache ${TRIPLE}-g++" >> $GITHUB_ENV | |
| echo "AR=${TRIPLE}-gcc-ar" >> $GITHUB_ENV | |
| echo "NM=${TRIPLE}-gcc-nm" >> $GITHUB_ENV | |
| echo "RANLIB=${TRIPLE}-gcc-ranlib" >> $GITHUB_ENV | |
| if [ "${OS}" = "w64" ]; then | |
| echo "CFLAGS=-Os -fPIC -fno-pie -no-pie -static -ffunction-sections -fdata-sections" >> $GITHUB_ENV | |
| echo "CXXFLAGS=-Os -fPIC -fno-pie -no-pie -static -ffunction-sections -fdata-sections" >> $GITHUB_ENV | |
| echo "LDFLAGS=-Os -fPIC -fno-pie -no-pie -static -Wl,--gc-sections -Wl,-strip-all -ffunction-sections -fdata-sections" >> $GITHUB_ENV | |
| else | |
| echo "CFLAGS=-Os -fPIC -fno-pie -no-pie -static -ffunction-sections -flto -fdata-sections" >> $GITHUB_ENV | |
| echo "CXXFLAGS=-Os -fPIC -fno-pie -no-pie -static -ffunction-sections -flto -fdata-sections" >> $GITHUB_ENV | |
| echo "LDFLAGS=-Os -fPIC -fno-pie -no-pie -static -Wl,--gc-sections -Wl,-strip-all -flto -ffunction-sections -fdata-sections" >> $GITHUB_ENV | |
| fi | |
| - name: Build libplist | |
| run: | | |
| wget -nc -P ${DOWNLOAD_PATH} https://github.com/libimobiledevice/libplist/releases/download/${LIBPLIST_VERSION}/libplist-${LIBPLIST_VERSION}.tar.bz2 | |
| tar xf ${DOWNLOAD_PATH}/libplist-${LIBPLIST_VERSION}.tar.bz2 -C ${DEP_PATH} | |
| cd ${DEP_PATH}/libplist-${LIBPLIST_VERSION} | |
| ./configure --host=${TRIPLE} --prefix=/usr --without-cython --enable-static --disable-shared | |
| make -j$(nproc) | |
| echo "LIBPLIST_INCLUDES=-I${DEP_PATH}/libplist-${LIBPLIST_VERSION}/include" >> $GITHUB_ENV | |
| echo "LIBPLIST_LIBS=${DEP_PATH}/libplist-${LIBPLIST_VERSION}/src/.libs/libplist-2.0.a" >> $GITHUB_ENV | |
| - name: Build OpenSSL | |
| run: | | |
| if [ "${OS}" = "w64" ]; then | |
| export PLATFORM="mingw64" | |
| else | |
| export PLATFORM="linux-${ARCH}" | |
| fi | |
| wget -nc -P ${DOWNLOAD_PATH} https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz | |
| tar xf ${DOWNLOAD_PATH}/openssl-${OPENSSL_VERSION}.tar.gz -C ${DEP_PATH} | |
| cd ${DEP_PATH}/openssl-${OPENSSL_VERSION} | |
| ./config -static enable-fips enable-capieng no-module enable-ktls no-zlib \ | |
| no-async no-comp no-idea no-mdc2 no-rc5 no-ec2m no-sm2 no-sm4 no-ssl3 no-seed no-weak-ssl-ciphers ${PLATFORM} | |
| make -j$(nproc) build_generated libcrypto.a | |
| echo "LIBCRYPTO_INCLUDES=-I${DEP_PATH}/openssl-${OPENSSL_VERSION}/include" >> $GITHUB_ENV | |
| if [ "${OS}" = "w64" ]; then | |
| echo "LIBCRYPTO_LIBS=${DEP_PATH}/openssl-${OPENSSL_VERSION}/libcrypto.a -lws2_32 -lgdi32 -ladvapi32 -lcrypt32 -luser32" >> $GITHUB_ENV | |
| else | |
| echo "LIBCRYPTO_LIBS=${DEP_PATH}/openssl-${OPENSSL_VERSION}/libcrypto.a" >> $GITHUB_ENV | |
| fi | |
| - name: Build mman-win32 | |
| if: ${{ env.OS == 'w64' }} | |
| run: | | |
| wget -nc -O ${DOWNLOAD_PATH}/mman-win32-${MMAN_COMMIT}.tar.gz https://github.com/alitrack/mman-win32/archive/${MMAN_COMMIT}.tar.gz || true | |
| tar xf ${DOWNLOAD_PATH}/mman-win32-${MMAN_COMMIT}.tar.gz -C ${DEP_PATH} | |
| cd ${DEP_PATH}/mman-win32-${MMAN_COMMIT} | |
| ./configure --prefix=/ --disable-shared --enable-static --cross-prefix="${TRIPLE}-" | |
| make -j$(nproc) | |
| mkdir -p include/sys/ | |
| ln -s ../../mman.h include/sys/ | |
| echo "CXXFLAGS=${CXXFLAGS} -I${DEP_PATH}/mman-win32-${MMAN_COMMIT}/include" >> $GITHUB_ENV | |
| echo "LIBS=${LIBS} ${DEP_PATH}/mman-win32-${MMAN_COMMIT}/libmman.a" >> $GITHUB_ENV | |
| - name: Build tre | |
| if: ${{ env.OS == 'w64' }} | |
| run: | | |
| sudo apt-get install -y autopoint | |
| wget -nc -O ${DOWNLOAD_PATH}/tre-${TRE_COMMIT}.tar.gz https://github.com/laurikari/tre/archive/${TRE_COMMIT}.tar.gz || true | |
| tar xf ${DOWNLOAD_PATH}/tre-${TRE_COMMIT}.tar.gz -C ${DEP_PATH} | |
| cd ${DEP_PATH}/tre-${TRE_COMMIT} | |
| ./utils/autogen.sh | |
| ./configure --host=${TRIPLE} --prefix=/usr --without-cython --enable-static --disable-shared | |
| make -j$(nproc) | |
| echo "CXXFLAGS=${CXXFLAGS} -I${DEP_PATH}/tre-${TRE_COMMIT}/include/tre" >> $GITHUB_ENV | |
| echo "LIBS=${LIBS} ${DEP_PATH}/tre-${TRE_COMMIT}/lib/.libs/libtre.a" >> $GITHUB_ENV | |
| - name: Build | |
| run: | | |
| make -j$(nproc) \ | |
| CXXFLAGS="-Wextra ${CXXFLAGS}" \ | |
| LDFLAGS="-static -static-libstdc++ ${LDFLAGS}" \ | |
| EXT="${EXT}" | |
| ${TRIPLE}-strip ldid${EXT} | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: ldid_${{ env.OS }}_${{ env.ARCH }} | |
| path: ldid${{ env.EXT }} | |
| - name: Upload release asset | |
| uses: softprops/action-gh-release@v1 | |
| if: ${{ github.event_name == 'release' }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| files: ldid${{ env.EXT }} | |
| build-macos: | |
| name: Build | |
| runs-on: macos-11 | |
| strategy: | |
| matrix: | |
| include: | |
| - arch: x86_64 | |
| os: macosx | |
| - arch: arm64 | |
| os: macosx | |
| - arch: arm64 | |
| os: iphoneos | |
| env: | |
| ARCH: ${{ matrix.arch }} | |
| OS: ${{ matrix.os }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| - name: Restore or cache dependencies | |
| uses: actions/cache@v3 | |
| with: | |
| path: | | |
| ~/Library/Caches/Mozilla.sccache | |
| ~/dep_src | |
| key: build-${{ matrix.os }}-${{ matrix.arch }}-${{ github.sha }} | |
| restore-keys: | | |
| build-${{ matrix.os }}-${{ matrix.arch }}- | |
| - name: Setup environment | |
| run: | | |
| export DOWNLOAD_PATH=${HOME}/dep_src | |
| export DEP_PATH=${HOME}/build | |
| mkdir -p ${DOWNLOAD_PATH} ${DEP_PATH} | |
| echo "DOWNLOAD_PATH=${DOWNLOAD_PATH}" >> $GITHUB_ENV | |
| echo "DEP_PATH=${DEP_PATH}" >> $GITHUB_ENV | |
| if [ "${ARCH}" = "arm64" ]; then | |
| echo "HOST_ARCH=aarch64" >> $GITHUB_ENV | |
| else | |
| echo "HOST_ARCH=${ARCH}" >> $GITHUB_ENV | |
| fi | |
| echo "SDK=$(xcrun -sdk ${OS} --show-sdk-path)" >> $GITHUB_ENV | |
| - name: Setup toolchain | |
| run: | | |
| brew install libtool autoconf automake | |
| wget -nc -P ${DOWNLOAD_PATH} https://github.com/mozilla/sccache/releases/download/v${SCCACHE_VERSION}/sccache-v${SCCACHE_VERSION}-x86_64-apple-darwin.tar.gz | |
| tar xf ${DOWNLOAD_PATH}/sccache-v${SCCACHE_VERSION}-x86_64-apple-darwin.tar.gz -C ${HOME} | |
| chmod +x ${HOME}/sccache-v${SCCACHE_VERSION}-x86_64-apple-darwin/sccache | |
| echo "${HOME}/sccache-v${SCCACHE_VERSION}-x86_64-apple-darwin" >> $GITHUB_PATH | |
| CC="sccache clang -arch ${ARCH} -isysroot ${SDK}" | |
| CXX="sccache clang++ -arch ${ARCH} -isysroot ${SDK}" | |
| if [ "${OS}" = "macosx" ]; then | |
| echo "CC=${CC} -mmacosx-version-min=10.13" >> $GITHUB_ENV | |
| echo "CXX=${CXX} -mmacosx-version-min=10.13" >> $GITHUB_ENV | |
| else | |
| echo "CC=${CC} -miphoneos-version-min=10.0" >> $GITHUB_ENV | |
| echo "CXX=${CXX} -miphoneos-version-min=10.0" >> $GITHUB_ENV | |
| fi | |
| echo "CXXFLAGS=-Os" >> $GITHUB_ENV | |
| echo "CFLAGS=-Os" >> $GITHUB_ENV | |
| - name: Build libplist | |
| run: | | |
| wget -nc -P ${DOWNLOAD_PATH} https://github.com/libimobiledevice/libplist/releases/download/${LIBPLIST_VERSION}/libplist-${LIBPLIST_VERSION}.tar.bz2 | |
| tar xf ${DOWNLOAD_PATH}/libplist-${LIBPLIST_VERSION}.tar.bz2 -C ${DEP_PATH} | |
| cd ${DEP_PATH}/libplist-${LIBPLIST_VERSION} | |
| ./configure --host=${HOST_ARCH}-apple-darwin --without-cython --enable-static --disable-shared | |
| make -j$(sysctl -n hw.ncpu) | |
| echo "LIBPLIST_INCLUDES=-I${DEP_PATH}/libplist-${LIBPLIST_VERSION}/include" >> $GITHUB_ENV | |
| echo "LIBPLIST_LIBS=${DEP_PATH}/libplist-${LIBPLIST_VERSION}/src/.libs/libplist-2.0.a" >> $GITHUB_ENV | |
| - name: Build OpenSSL | |
| run: | | |
| wget -nc -P ${DOWNLOAD_PATH} https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz | |
| tar xf ${DOWNLOAD_PATH}/openssl-${OPENSSL_VERSION}.tar.gz -C ${DEP_PATH} | |
| cd ${DEP_PATH}/openssl-${OPENSSL_VERSION} | |
| ./config -static enable-fips enable-capieng no-module enable-ktls no-zlib \ | |
| no-async no-comp no-idea no-mdc2 no-rc5 no-ec2m no-sm2 no-sm4 no-ssl3 no-seed no-weak-ssl-ciphers darwin64-${ARCH}-cc | |
| make -j$(sysctl -n hw.ncpu) build_generated libcrypto.a | |
| echo "LIBCRYPTO_INCLUDES=${CXXFLAGS} -I${DEP_PATH}/openssl-${OPENSSL_VERSION}/include" >> $GITHUB_ENV | |
| echo "LIBCRYPTO_LIBS=${DEP_PATH}/openssl-${OPENSSL_VERSION}/libcrypto.a" >> $GITHUB_ENV | |
| - name: Build | |
| run: | | |
| make -j$(sysctl -n hw.ncpu) \ | |
| CXXFLAGS="-flto=thin -Wextra ${CXXFLAGS}" \ | |
| LDFLAGS="-flto=thin" | |
| strip ldid | |
| - name: Upload artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: ldid_${{ matrix.os }}_${{ matrix.arch }} | |
| path: ldid | |
| - name: Upload release asset | |
| uses: softprops/action-gh-release@v1 | |
| if: ${{ github.event_name == 'release' }} | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| files: ldid |