Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Refactor setup #436

Merged
merged 3 commits into from
Aug 29, 2024
Merged

Refactor setup #436

merged 3 commits into from
Aug 29, 2024

Conversation

simo5
Copy link
Member

@simo5 simo5 commented Aug 26, 2024

Move only the token specific initialization into custom setup files, and the use pkcs11-tool and a single script to set up all the keys and certificates.

Description

The main work of setting up tokens is now in test/setup.sh and each token type has a -init.sh file that does the bare minimum custom initialization needed.

Checklist

  • [ ] Code modified for feature
  • Test suite updated with functionality tests
  • [ ] Test suite updated with negative tests
  • [ ] Documentation updated

Reviewer's checklist:

  • [ ] Any issues marked for closing are addressed
  • There is a test suite reasonably covering new functionality or modifications
  • [ ] This feature/change has adequate documentation added
  • Code conform to coding style that today cannot yet be enforced via the check style test
  • Commits have short titles and sensible commit messages
  • [ ] Coverity Scan has run if needed (code PR) and no new defects were found

@simo5 simo5 requested a review from Jakuje August 26, 2024 23:42
@simo5
Copy link
Member Author

simo5 commented Aug 26, 2024

NOTE: Kryoptic stuff will fail until latchset/kryoptic#84 is merged

@simo5 simo5 marked this pull request as draft August 26, 2024 23:53
@simo5 simo5 force-pushed the singlesetup branch 3 times, most recently from 0209be8 to d83eace Compare August 27, 2024 00:18
@simo5
Copy link
Member Author

simo5 commented Aug 27, 2024

NOTE: softoken fails on Centos9 because it does not support NSS_LIB_PARAMS yet I think ...

tests/setup.sh Outdated Show resolved Hide resolved
tests/setup.sh Outdated Show resolved Hide resolved
@simo5
Copy link
Member Author

simo5 commented Aug 27, 2024

@Jakuje what should we do with NSS on CentOS 9 ?
Test the version and skip it if it is not new enough ?

@Jakuje
Copy link
Contributor

Jakuje commented Aug 27, 2024

@Jakuje what should we do with NSS on CentOS 9 ? Test the version and skip it if it is not new enough ?

Probably yes. I think CentOS 9 should get the NSS update any time soon (I thought this already some months back though).

@simo5 simo5 force-pushed the singlesetup branch 5 times, most recently from 8dd5cff to d51d251 Compare August 27, 2024 16:57
@simo5 simo5 marked this pull request as ready for review August 27, 2024 16:57
@simo5 simo5 requested a review from Jakuje August 27, 2024 16:57
@simo5
Copy link
Member Author

simo5 commented Aug 27, 2024

@Jakuje Best I could do is to make the C9s test "pass" without actually doing anything if the NSS version is too old.

.github/workflows/build.yml Outdated Show resolved Hide resolved
tests/softokn-init.sh Outdated Show resolved Hide resolved
@simo5 simo5 requested a review from Jakuje August 28, 2024 14:57
@simo5 simo5 force-pushed the singlesetup branch 2 times, most recently from 82f466a to 6212f8b Compare August 28, 2024 16:21
Jakuje
Jakuje previously approved these changes Aug 29, 2024
Copy link
Contributor

@Jakuje Jakuje left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

one last comment, otherwise consider approved.

tests/setup.sh Show resolved Hide resolved
simo5 added 3 commits August 29, 2024 10:48
Move only the token specific initialization into custom setup files, and
the use pkcs11-tool and a single script to set up all the keys and
certificates.

Signed-off-by: Simo Sorce <[email protected]>
Unfortunately there does not seem to be a real way to skip the test,
this just marks it as pass without doing nothing.
Hopefully we can drop this special case soon as c9s get's a new version
of NSS.

Signed-off-by: Simo Sorce <[email protected]>
@simo5 simo5 added covscan-ok Coverity scan passed and removed covscan-ok Coverity scan passed labels Aug 29, 2024
@simo5
Copy link
Member Author

simo5 commented Aug 29, 2024

Thanks for the review @Jakuje

@simo5 simo5 merged commit cbffce1 into latchset:main Aug 29, 2024
41 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants