mirror of
https://repo.dactyloidae.xyz/Dactyloidae/UXP.git
synced 2026-09-19 23:07:33 +09:00
d36d4eb674
- Added HACL*Poly1305 32-bit (INRIA/Microsoft) - Updated to final TLS 1.3 draft version (28) - Removed TLS 1.3 prerelease draft limit check - Removed NPN code - Enabled dev/urandom-only RNG on Linux with NSS_SEED_ONLY_DEV_URANDOM for non-standard environments - Fixed several bugs with TLS 1.3 negotiation - Updated internal certificate store - Added support for the TLS Record Size Limit Extension. - Fixed CVE-2018-0495 - Various security fixes in the ASN.1 code.
25 lines
968 B
Bash
25 lines
968 B
Bash
#!/usr/bin/env bash
|
|
|
|
set -v -e -x
|
|
|
|
# Prepare build (OCaml packages)
|
|
opam init
|
|
echo ". /home/worker/.opam/opam-init/init.sh > /dev/null 2> /dev/null || true" >> .bashrc
|
|
opam switch -v ${opamv}
|
|
opam install ocamlfind batteries sqlite3 fileutils yojson ppx_deriving_yojson zarith pprint menhir ulex process fix wasm stdint
|
|
|
|
# Get the HACL* code
|
|
git clone ${haclrepo} hacl-star
|
|
git -C hacl-star checkout ${haclversion}
|
|
|
|
# Prepare submodules, and build, verify, test, and extract c code
|
|
# This caches the extracted c code (pins the HACL* version). All we need to do
|
|
# on CI now is comparing the code in this docker image with the one in NSS.
|
|
opam config exec -- make -C hacl-star prepare -j$(nproc)
|
|
make -C hacl-star -f Makefile.build snapshots/nss -j$(nproc)
|
|
KOPTS="-funroll-loops 5" make -C hacl-star/code/curve25519 test -j$(nproc)
|
|
make -C hacl-star/code/salsa-family test -j$(nproc)
|
|
make -C hacl-star/code/poly1305 test -j$(nproc)
|
|
|
|
# Cleanup.
|
|
rm -rf ~/.ccache ~/.cache
|