summaryrefslogtreecommitdiffstats
path: root/security/nss/automation/taskcluster/docker-acvp/bin
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-19 00:47:55 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-19 00:47:55 +0000
commit26a029d407be480d791972afb5975cf62c9360a6 (patch)
treef435a8308119effd964b339f76abb83a57c29483 /security/nss/automation/taskcluster/docker-acvp/bin
parentInitial commit. (diff)
downloadfirefox-26a029d407be480d791972afb5975cf62c9360a6.tar.xz
firefox-26a029d407be480d791972afb5975cf62c9360a6.zip
Adding upstream version 124.0.1.upstream/124.0.1
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'security/nss/automation/taskcluster/docker-acvp/bin')
-rwxr-xr-xsecurity/nss/automation/taskcluster/docker-acvp/bin/checkout.sh25
-rwxr-xr-xsecurity/nss/automation/taskcluster/docker-acvp/bin/run.sh35
2 files changed, 60 insertions, 0 deletions
diff --git a/security/nss/automation/taskcluster/docker-acvp/bin/checkout.sh b/security/nss/automation/taskcluster/docker-acvp/bin/checkout.sh
new file mode 100755
index 0000000000..2a7d32c46b
--- /dev/null
+++ b/security/nss/automation/taskcluster/docker-acvp/bin/checkout.sh
@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+
+set -v -e -x
+
+if [ $(id -u) = 0 ]; then
+ # Drop privileges by re-running this script.
+ exec su worker $0
+fi
+
+# Default values for testing.
+REVISION=${NSS_HEAD_REVISION:-default}
+REPOSITORY=${NSS_HEAD_REPOSITORY:-https://hg.mozilla.org/projects/nss}
+
+# Clone NSS.
+hg clone -r $REVISION $REPOSITORY nss
+
+# Clone NSPR if needed.
+hg clone -r default https://hg.mozilla.org/projects/nspr
+
+if [[ -f nss/nspr.patch && "$ALLOW_NSPR_PATCH" == "1" ]]; then
+ pushd nspr
+ cat ../nss/nspr.patch | patch -p1
+ popd
+fi
+
diff --git a/security/nss/automation/taskcluster/docker-acvp/bin/run.sh b/security/nss/automation/taskcluster/docker-acvp/bin/run.sh
new file mode 100755
index 0000000000..f4c07818dd
--- /dev/null
+++ b/security/nss/automation/taskcluster/docker-acvp/bin/run.sh
@@ -0,0 +1,35 @@
+#!/bin/bash -eu
+#
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+#
+################################################################################
+export NSS_PATH=$PWD NSS_SOURCES_PATH=$PWD/nss
+export LD_LIBRARY_PATH=$PWD/dist/Debug/lib/
+export RUST_LOG=warn
+export RUSTFLAGS="-C instrument-coverage"
+cd nss
+CC=clang-15 CXX=clang++-15 ./build.sh -g -v --sourcecov --static --disable-tests
+
+TEST_DIRECTORY=$NSS_SOURCES_PATH/tests/acvp
+
+git clone --depth=1 https://gitlab.com/nisec/nss-project/acvp-rust.git
+cd acvp-rust
+cargo build
+TESTRUN="cargo run --bin test -- --profdata-command llvm-profdata-15"
+echo "Big Number (fuzzed):"
+$TESTRUN $TEST_DIRECTORY/fuzzed/bn.json bn nss
+echo "AES-GCM (acvp-server):"
+$TESTRUN $TEST_DIRECTORY/aes-gcm.json symmetric nss
+echo "ECDSA (acvp-server):"
+$TESTRUN $TEST_DIRECTORY/ecdsa.json ecdsa nss
+echo "ECDSA (fuzzed):"
+$TESTRUN $TEST_DIRECTORY/fuzzed/ecdsa.json ecdsa nss
+echo "RSA (acvp-server):"
+$TESTRUN $TEST_DIRECTORY/rsa.json rsa nss
+echo "RSA (fuzzed):"
+$TESTRUN $TEST_DIRECTORY/fuzzed/rsa.json rsa nss
+echo "SHA-256 (acvp-server):"
+$TESTRUN $TEST_DIRECTORY/sha256.json sha nss
+$TESTRUN $TEST_DIRECTORY/sha256.mct.json sha nss