2020-04-06 09:58:03 +01:00
{
"schema" : "sai-1" ,
2020-05-01 05:45:18 +01:00
# W e ' r e d o i n g s e p a r a t e i n s t a l l i n t o d e s t d i r s o t h a t t h e t e s t s e r v e r
# h a s s o m e w h e r e t o g o t o f i n d i t s / u s r / s h a r e c o n t e n t l i k e c e r t s
2020-04-06 09:58:03 +01:00
"platforms" : {
2020-10-26 06:41:52 +00:00
"linux-debian-buster/x86_64-amd/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G DEB\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2020-10-26 06:41:52 +00:00
} ,
2020-10-29 04:57:05 +00:00
"linux-debian-buster/x86-amd/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G DEB\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2020-10-29 04:57:05 +00:00
} ,
2020-10-26 06:41:52 +00:00
"linux-debian-sid/x86_64-amd/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G DEB\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2021-02-28 17:17:55 +00:00
} ,
"linux-ubuntu-xenial/x86_64-amd/gcc" : {
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G DEB\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2020-10-26 06:41:52 +00:00
} ,
"linux-debian-sid/x86-amd/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G DEB\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2020-10-26 06:41:52 +00:00
} ,
2020-06-05 10:13:17 +01:00
"linux-ubuntu-1804/x86_64-amd/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G DEB\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2020-05-01 05:45:18 +01:00
} ,
2020-06-05 10:13:17 +01:00
"linux-ubuntu-2004/x86_64-amd/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G DEB\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2020-04-06 09:58:03 +01:00
} ,
2020-06-05 08:33:51 +01:00
"linux-fedora-32/x86_64-amd/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "rm -rf build destdir ; mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G RPM\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2020-05-01 05:45:18 +01:00
} ,
2020-06-05 08:33:51 +01:00
"linux-gentoo/x86_64-amd/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G ZIP\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2020-05-27 09:53:34 +01:00
} ,
2021-01-21 05:54:16 +00:00
"linux-centos-7/x86_64-amd/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G RPM\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2021-01-21 05:54:16 +00:00
} ,
2020-06-05 08:33:51 +01:00
"linux-centos-8/x86_64-amd/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G RPM\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2020-04-14 19:04:13 +01:00
} ,
2020-06-05 10:13:17 +01:00
"linux-ubuntu-2004/aarch64-a72-bcm2711-rpi4/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build;cd build;export CCACHE_DISABLE=1;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G DEB\";cmake .. ${cmake} && make -j3 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j3 --output-on-failure ${cpack}" ,
2020-05-01 05:45:18 +01:00
"default" : false
2020-04-06 09:58:03 +01:00
} ,
2020-06-05 08:33:51 +01:00
"linux-android/aarch64/llvm" : {
2020-05-13 10:19:37 +01:00
"build" : "mkdir build;cd build;cmake .. -DCMAKE_TOOLCHAIN_FILE=../libwebsockets/contrib/cross-aarch64-android.cmake ${cmake} && make -j" ,
"default" : false
} ,
2020-06-05 08:33:51 +01:00
"netbsd-iOS/aarch64/llvm" : {
2020-05-12 10:00:10 +01:00
"build" : "mkdir build destdir; cd build; export SAI_CPACK=\"-G ZIP\";cmake .. -DCMAKE_MAKE_PROGRAM=/usr/bin/make -DCMAKE_IOS_DEVELOPER_ROOT=/opt/Xcode-beta.app/Contents/Developer/Platforms/iPhoneOS.platform/Developer -DCMAKE_TOOLCHAIN_FILE=contrib/iOS.cmake -DIOS_PLATFORM=OS ${cmake} && make -j" ,
"default" : false
} ,
2020-12-05 15:37:54 +00:00
"netbsd-OSX-bigsur/x86_64-intel-i3/llvm" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir; cd build; export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G ZIP\";export MACOSX_DEPLOYMENT_TARGET=10.15 ; cmake .. -DCMAKE_MAKE_PROGRAM=/usr/bin/make -DLWS_OPENSSL_INCLUDE_DIRS=/usr/local/opt/openssl@1.1/include -DLWS_OPENSSL_LIBRARIES=\"/usr/local/opt/openssl/lib/libssl.dylib;/usr/local/opt/openssl/lib/libcrypto.dylib\" ${cmake} && make -j4 && make -j DESTDIR=../destdir install && ctest -j2 --output-on-failure ${cpack}"
2020-04-06 09:58:03 +01:00
} ,
2020-12-05 15:37:54 +00:00
"netbsd-OSX-bigsur/aarch64-apple-m1/llvm" : {
2021-01-06 15:08:22 +00:00
"build" : "mkdir build destdir; cd build; export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export SAI_CPACK=\"-G ZIP\";export MACOSX_DEPLOYMENT_TARGET=10.15 ; cmake .. -DLWS_WITH_SUL_DEBUGGING=1 -DCMAKE_SYSTEM_PREFIX_PATH=/opt/homebrew -DLWS_OPENSSL_INCLUDE_DIRS=/opt/homebrew/Cellar/openssl@1.1/1.1.1h/include '-DLWS_OPENSSL_LIBRARIES=/opt/homebrew/Cellar/openssl@1.1/1.1.1h/lib/libssl.dylib;/opt/homebrew/Cellar/openssl@1.1/1.1.1h/lib/libcrypto.dylib' ${cmake} && make -j6 && rm -rf ../destdir && make -j DESTDIR=../destdir install && ctest -j3 --output-on-failure ${cpack}"
2020-12-05 15:37:54 +00:00
} ,
2021-03-08 11:49:46 +00:00
"solaris/x86_64-amd/gcc" : {
"build" : "mkdir build destdir; cd build; export SAI_CPACK=\"-G ZIP\";cmake .. ${cmake} && make -j 4 && make install DESTDIR=../destdir && ctest -j2 --output-on-failure ${cpack}" ,
"default" : false
} ,
2020-06-05 08:33:51 +01:00
"freertos-linkit/arm32-m4-mt7697-usi/gcc" : {
2021-03-29 06:42:50 +01:00
"build" : "mkdir build;cd build;export CCACHE_DISABLE=1;cmake .. -DCMAKE_INSTALL_PREFIX:PATH=/tmp -DCMAKE_TOOLCHAIN_FILE=../contrib/cross-linkit.cmake -DLWS_PLAT_FREERTOS=1 -DLWS_WITH_ZLIB=0 -DLWS_WITHOUT_EXTENSIONS=1 -DLWS_WITH_ZIP_FOPS=0 -DLWS_WITH_HTTP_STREAM_COMPRESSION=0 -DLWS_WITH_MBEDTLS=1 -DLWS_WITH_FILE_OPS=0 -DLWS_IPV6=0 ${cmake};make -j" ,
2020-04-07 06:35:00 +01:00
"default" : false
} ,
2021-01-29 16:28:21 +00:00
"w10/x86_64-amd/msvc" : {
2020-10-04 07:27:22 +01:00
"build" : "mkdir build && cd build && set SAI_CPACK=\"-G ZIP\" && cmake .. -DLWS_OPENSSL_LIBRARIES=\"C:\\Program Files\\OpenSSL\\lib\\libssl.lib;C:\\Program Files\\OpenSSL\\lib\\libcrypto.lib\" -DLWS_OPENSSL_INCLUDE_DIRS=\"C:\\Program Files\\OpenSSL\\include\" -DLWS_EXT_PTHREAD_INCLUDE_DIR=\"C:\\Program Files (x86)\\pthreads\\include\" -DLWS_EXT_PTHREAD_LIBRARIES=\"C:\\Program Files (x86)\\pthreads\\lib\\x64\\libpthreadGC2.a\" ${cmake} && cmake --build . --config DEBUG && set CTEST_OUTPUT_ON_FAILURE=1 && ctest . -C DEBUG -j1 --output-on-failure" ,
2020-04-06 09:58:03 +01:00
"default" : false
2020-05-14 21:28:48 +01:00
} ,
2021-01-29 16:28:21 +00:00
"w10/x86_64-amd/wmbedtlsmsvc" : {
"build" : "mkdir build && cd build && set SAI_CPACK=\"-G ZIP\" && cmake .. -DLWS_WITH_MBEDTLS=1 -DLWS_MBEDTLS_INCLUDE_DIRS=\"C:/Program Files (x86)/mbed TLS/include\" -DMBEDTLS_LIBRARY=\"C:/Program Files (x86)/mbed TLS/lib/mbedtls.lib\" -DMBEDX509_LIBRARY=\"C:/Program Files (x86)/mbed TLS/lib/mbedx509.lib\" -DMBEDCRYPTO_LIBRARY=\"C:/Program Files (x86)/mbed TLS/lib/mbedcrypto.lib\" -DLWS_EXT_PTHREAD_INCLUDE_DIR=\"C:\\Program Files (x86)\\pthreads\\include\" -DLWS_EXT_PTHREAD_LIBRARIES=\"C:\\Program Files (x86)\\pthreads\\lib\\x64\\libpthreadGC2.a\" ${cmake} && cmake --build . --config DEBUG && set CTEST_OUTPUT_ON_FAILURE=1 && ctest . -C DEBUG -j1 --output-on-failure" ,
"default" : false
} ,
"w10/x86_64-amd/noptmsvc" : {
2020-10-29 04:57:05 +00:00
"build" : "mkdir build && cd build && set SAI_CPACK=\"-G ZIP\" && cmake .. -DLWS_OPENSSL_LIBRARIES=\"C:\\Program Files\\OpenSSL\\lib\\libssl.lib;C:\\Program Files\\OpenSSL\\lib\\libcrypto.lib\" -DLWS_OPENSSL_INCLUDE_DIRS=\"C:\\Program Files\\OpenSSL\\include\" ${cmake} && cmake --build . --config DEBUG && set CTEST_OUTPUT_ON_FAILURE=1 && ctest . -C DEBUG -j1 --output-on-failure" ,
"default" : false
} ,
2021-01-29 16:28:21 +00:00
"w10/x86_64-amd/mingw32" : {
2020-09-17 14:30:23 +03:00
"build" : "mkdir build && cd build && cmake .. -DCMAKE_TOOLCHAIN_FILE=../contrib/cross-w32.cmake ${cmake} && cmake --build . --config DEBUG" ,
2020-06-03 09:29:28 +01:00
"default" : false
} ,
2021-01-29 16:28:21 +00:00
"w10/x86_64-amd/mingw64" : {
2020-09-17 14:30:23 +03:00
"build" : "mkdir build && cd build && cmake .. -DCMAKE_TOOLCHAIN_FILE=../contrib/cross-w64.cmake ${cmake} && cmake --build . --config DEBUG" ,
2020-06-03 09:29:28 +01:00
"default" : false
} ,
2020-06-05 08:33:51 +01:00
"freertos-espidf/xl6-esp32/gcc" : {
2020-05-14 21:28:48 +01:00
# o f f i c i a l w a y t o g e t s d k c o n f i g . h i s i d f . p y m e n u c o n f i g , b u t
# n o o b v i o u s w a y t o d o t h a t i n C I
ss: static policy: dynamic vhost instantiation
Presently a vh is allocated per trust store at policy parsing-time, this
is no problem on a linux-class device or if you decide you need a dynamic
policy for functionality reasons.
However if you're in a constrained enough situation that the static policy
makes sense, in the case your trust stores do not have 100% duty cycle, ie,
are anyway always in use, the currently-unused vhosts and their x.509 stack
are sitting there taking up heap for no immediate benefit.
This patch modifies behaviour in ..._STATIC_POLICY_ONLY so that vhosts and
associated x.509 tls contexts are not instantiated until a secure stream using
them is created; they are refcounted, and when the last logical secure
stream using a vhost is destroyed, the vhost and its tls context is also
destroyed.
If another ss connection is created that wants to use the trust store, the
vhost and x.509 context is regenerated again as needed.
Currently the refcounting is by ss, it's also possible to move the refcounting
to be by connection. The choice is between the delay to generate the vh
being visisble at logical ss creation-time, or at connection-time. It's anyway
not preferable to have ss instantiated and taking up space with no associated
connection or connection attempt underway.
NB you will need to reprocess any static policies after this patch so they
conform to the trust_store changes.
2020-07-20 07:28:28 +01:00
"build" : "rm -rf ebuild ; mkdir ebuild; cd ebuild; cp -rp ../minimal-examples/embedded/esp32/${cpack} . ; cd ${cpack} ; . /opt/esp/esp-idf/export.sh ; ln -sf ../.. libwebsockets ; idf.py set-target esp32 && cp libwebsockets/minimal-examples/embedded/esp32/${cpack}/sdkconfig . && cp sdkconfig.h build && idf.py ${cmake} build size size-components size-files && cd build && /usr/local/bin/sai-device ${cpack} ESPPORT=0 ctest --output-on-failure" ,
2020-05-14 21:28:48 +01:00
"default" : false
2020-06-01 20:18:30 +01:00
} ,
2021-08-26 13:33:02 +01:00
"freertos-espidf/riscv-esp32c3/gcc" : {
"build" : "rm -rf ebuild ; mkdir ebuild; cd ebuild; cp -rp ../minimal-examples/embedded/esp32/${cpack} . ; cd ${cpack} ; . /opt/esp/esp-idf/export.sh ; ln -sf ../.. libwebsockets ; idf.py set-target esp32c3 && cp libwebsockets/minimal-examples/embedded/esp32/${cpack}/sdkconfig . && cp sdkconfig.h build && idf.py ${cmake} build size size-components size-files && cd build && /usr/local/bin/sai-device ${cpack} ESPPORT=0 ctest --output-on-failure" ,
"default" : false
} ,
2020-06-05 08:33:51 +01:00
"linux-fedora-32/riscv64-virt/gcc" : {
2021-03-05 13:13:10 +00:00
"build" : "mkdir build destdir;cd build;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export CCACHE_DISABLE=1;export SAI_CPACK=\"-G RPM\";cmake .. ${cmake} && make -j4 && rm -rf ../destdir && make -j12 DESTDIR=../destdir install && ctest -j3 --output-on-failure ${cpack}" ,
2020-06-01 20:18:30 +01:00
"default" : false
2020-08-09 10:15:45 +01:00
} ,
"freebsd-12/x86_64-amd/llvm" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export CCACHE_DISABLE=1;cmake .. ${cmake} && make -j3 && rm -rf ../destdir && make -j3 DESTDIR=../destdir install"
2020-12-06 19:52:55 +00:00
} ,
2021-02-14 16:04:40 +00:00
"openbsd/x86_64-amd/llvm" : {
"build" : "mkdir build destdir;cd build;export CCACHE_DISABLE=1;cmake .. ${cmake};make -j4 && rm -rf ../destdir && make -j3 DESTDIR=../destdir install && ctest -j3 --output-on-failure" ,
"default" : false
} ,
2020-12-06 19:52:55 +00:00
"netbsd/aarch64BE-bcm2837-a53/gcc" : {
2021-01-25 11:40:54 +00:00
"build" : "mkdir build destdir;cd build;export LD_LIBRARY_PATH=../destdir/usr/local/share/libwebsockets-test-server/plugins:../destdir/usr/local/lib;export CCACHE_DISABLE=1;cmake .. ${cmake};make -j6 && rm -rf ../destdir && make -j6 DESTDIR=../destdir install && /usr/pkg/bin/ctest -j3 --output-on-failure" ,
2020-12-06 19:52:55 +00:00
"default" : false
}
2020-04-06 09:58:03 +01:00
} ,
"configurations" : {
"default" : {
2020-04-07 06:35:00 +01:00
"cmake" : "" ,
2021-03-08 11:49:46 +00:00
"platforms" : "w10/x86_64-amd/msvc, w10/x86_64-amd/noptmsvc, freertos-linkit/arm32-m4-mt7697-usi/gcc, linux-ubuntu-2004/aarch64-a72-bcm2711-rpi4/gcc, w10/x86_64-amd/mingw32, w10/x86_64-amd/mingw64, netbsd/aarch64BE-bcm2837-a53/gcc, w10/x86_64-amd/wmbedtlsmsvc, openbsd/x86_64-amd/llvm, solaris/x86_64-amd/gcc"
2020-06-25 14:44:05 +01:00
} ,
2021-02-01 11:48:04 +00:00
"default-noudp" : {
"cmake" : "-DLWS_WITH_UDP=0" ,
2021-01-06 15:08:22 +00:00
"platforms" : "w10/x86_64-amd/msvc, w10/x86_64-amd/noptmsvc, freertos-linkit/arm32-m4-mt7697-usi/gcc, linux-ubuntu-2004/aarch64-a72-bcm2711-rpi4/gcc, w10/x86_64-amd/mingw32, w10/x86_64-amd/mingw64, netbsd/aarch64BE-bcm2837-a53/gcc, w10/x86_64-amd/wmbedtlsmsvc"
2021-02-01 11:48:04 +00:00
} ,
2021-03-16 13:32:05 +00:00
"fault-injection" : {
"cmake" : "-DLWS_WITH_SYS_FAULT_INJECTION=1 -DLWS_WITH_MINIMAL_EXAMPLES=1" ,
"platforms" : "w10/x86_64-amd/msvc"
} ,
2021-08-26 13:33:02 +01:00
"esp32-c3" : {
"cmake" : "-DLWS_IPV6=0" ,
"cpack" : "esp-c3dev" ,
"platforms" : "none, freertos-espidf/riscv-esp32c3/gcc"
} ,
ss: static policy: dynamic vhost instantiation
Presently a vh is allocated per trust store at policy parsing-time, this
is no problem on a linux-class device or if you decide you need a dynamic
policy for functionality reasons.
However if you're in a constrained enough situation that the static policy
makes sense, in the case your trust stores do not have 100% duty cycle, ie,
are anyway always in use, the currently-unused vhosts and their x.509 stack
are sitting there taking up heap for no immediate benefit.
This patch modifies behaviour in ..._STATIC_POLICY_ONLY so that vhosts and
associated x.509 tls contexts are not instantiated until a secure stream using
them is created; they are refcounted, and when the last logical secure
stream using a vhost is destroyed, the vhost and its tls context is also
destroyed.
If another ss connection is created that wants to use the trust store, the
vhost and x.509 context is regenerated again as needed.
Currently the refcounting is by ss, it's also possible to move the refcounting
to be by connection. The choice is between the delay to generate the vh
being visisble at logical ss creation-time, or at connection-time. It's anyway
not preferable to have ss instantiated and taking up space with no associated
connection or connection attempt underway.
NB you will need to reprocess any static policies after this patch so they
conform to the trust_store changes.
2020-07-20 07:28:28 +01:00
"esp32-heltec" : {
2021-03-29 06:42:50 +01:00
"cmake" : "-DLWS_IPV6=0" ,
ss: static policy: dynamic vhost instantiation
Presently a vh is allocated per trust store at policy parsing-time, this
is no problem on a linux-class device or if you decide you need a dynamic
policy for functionality reasons.
However if you're in a constrained enough situation that the static policy
makes sense, in the case your trust stores do not have 100% duty cycle, ie,
are anyway always in use, the currently-unused vhosts and their x.509 stack
are sitting there taking up heap for no immediate benefit.
This patch modifies behaviour in ..._STATIC_POLICY_ONLY so that vhosts and
associated x.509 tls contexts are not instantiated until a secure stream using
them is created; they are refcounted, and when the last logical secure
stream using a vhost is destroyed, the vhost and its tls context is also
destroyed.
If another ss connection is created that wants to use the trust store, the
vhost and x.509 context is regenerated again as needed.
Currently the refcounting is by ss, it's also possible to move the refcounting
to be by connection. The choice is between the delay to generate the vh
being visisble at logical ss creation-time, or at connection-time. It's anyway
not preferable to have ss instantiated and taking up space with no associated
connection or connection attempt underway.
NB you will need to reprocess any static policies after this patch so they
conform to the trust_store changes.
2020-07-20 07:28:28 +01:00
"cpack" : "esp-heltec-wb32" ,
2020-06-25 14:44:05 +01:00
"platforms" : "none, freertos-espidf/xl6-esp32/gcc"
} ,
ss: static policy: dynamic vhost instantiation
Presently a vh is allocated per trust store at policy parsing-time, this
is no problem on a linux-class device or if you decide you need a dynamic
policy for functionality reasons.
However if you're in a constrained enough situation that the static policy
makes sense, in the case your trust stores do not have 100% duty cycle, ie,
are anyway always in use, the currently-unused vhosts and their x.509 stack
are sitting there taking up heap for no immediate benefit.
This patch modifies behaviour in ..._STATIC_POLICY_ONLY so that vhosts and
associated x.509 tls contexts are not instantiated until a secure stream using
them is created; they are refcounted, and when the last logical secure
stream using a vhost is destroyed, the vhost and its tls context is also
destroyed.
If another ss connection is created that wants to use the trust store, the
vhost and x.509 context is regenerated again as needed.
Currently the refcounting is by ss, it's also possible to move the refcounting
to be by connection. The choice is between the delay to generate the vh
being visisble at logical ss creation-time, or at connection-time. It's anyway
not preferable to have ss instantiated and taking up space with no associated
connection or connection attempt underway.
NB you will need to reprocess any static policies after this patch so they
conform to the trust_store changes.
2020-07-20 07:28:28 +01:00
"esp32-wrover" : {
2021-03-29 06:42:50 +01:00
"cmake" : "-DLWS_IPV6=0" ,
ss: static policy: dynamic vhost instantiation
Presently a vh is allocated per trust store at policy parsing-time, this
is no problem on a linux-class device or if you decide you need a dynamic
policy for functionality reasons.
However if you're in a constrained enough situation that the static policy
makes sense, in the case your trust stores do not have 100% duty cycle, ie,
are anyway always in use, the currently-unused vhosts and their x.509 stack
are sitting there taking up heap for no immediate benefit.
This patch modifies behaviour in ..._STATIC_POLICY_ONLY so that vhosts and
associated x.509 tls contexts are not instantiated until a secure stream using
them is created; they are refcounted, and when the last logical secure
stream using a vhost is destroyed, the vhost and its tls context is also
destroyed.
If another ss connection is created that wants to use the trust store, the
vhost and x.509 context is regenerated again as needed.
Currently the refcounting is by ss, it's also possible to move the refcounting
to be by connection. The choice is between the delay to generate the vh
being visisble at logical ss creation-time, or at connection-time. It's anyway
not preferable to have ss instantiated and taking up space with no associated
connection or connection attempt underway.
NB you will need to reprocess any static policies after this patch so they
conform to the trust_store changes.
2020-07-20 07:28:28 +01:00
"cpack" : "esp-wrover-kit" ,
2020-06-25 14:44:05 +01:00
"platforms" : "none, freertos-espidf/xl6-esp32/gcc"
2020-04-07 06:35:00 +01:00
} ,
ss: static policy: dynamic vhost instantiation
Presently a vh is allocated per trust store at policy parsing-time, this
is no problem on a linux-class device or if you decide you need a dynamic
policy for functionality reasons.
However if you're in a constrained enough situation that the static policy
makes sense, in the case your trust stores do not have 100% duty cycle, ie,
are anyway always in use, the currently-unused vhosts and their x.509 stack
are sitting there taking up heap for no immediate benefit.
This patch modifies behaviour in ..._STATIC_POLICY_ONLY so that vhosts and
associated x.509 tls contexts are not instantiated until a secure stream using
them is created; they are refcounted, and when the last logical secure
stream using a vhost is destroyed, the vhost and its tls context is also
destroyed.
If another ss connection is created that wants to use the trust store, the
vhost and x.509 context is regenerated again as needed.
Currently the refcounting is by ss, it's also possible to move the refcounting
to be by connection. The choice is between the delay to generate the vh
being visisble at logical ss creation-time, or at connection-time. It's anyway
not preferable to have ss instantiated and taking up space with no associated
connection or connection attempt underway.
NB you will need to reprocess any static policies after this patch so they
conform to the trust_store changes.
2020-07-20 07:28:28 +01:00
"esp32-wrover-static" : {
2021-03-29 06:42:50 +01:00
"cmake" : "-DLWS_WITH_SECURE_STREAMS_STATIC_POLICY_ONLY=1 -DLWS_IPV6=0" ,
ss: static policy: dynamic vhost instantiation
Presently a vh is allocated per trust store at policy parsing-time, this
is no problem on a linux-class device or if you decide you need a dynamic
policy for functionality reasons.
However if you're in a constrained enough situation that the static policy
makes sense, in the case your trust stores do not have 100% duty cycle, ie,
are anyway always in use, the currently-unused vhosts and their x.509 stack
are sitting there taking up heap for no immediate benefit.
This patch modifies behaviour in ..._STATIC_POLICY_ONLY so that vhosts and
associated x.509 tls contexts are not instantiated until a secure stream using
them is created; they are refcounted, and when the last logical secure
stream using a vhost is destroyed, the vhost and its tls context is also
destroyed.
If another ss connection is created that wants to use the trust store, the
vhost and x.509 context is regenerated again as needed.
Currently the refcounting is by ss, it's also possible to move the refcounting
to be by connection. The choice is between the delay to generate the vh
being visisble at logical ss creation-time, or at connection-time. It's anyway
not preferable to have ss instantiated and taking up space with no associated
connection or connection attempt underway.
NB you will need to reprocess any static policies after this patch so they
conform to the trust_store changes.
2020-07-20 07:28:28 +01:00
"cpack" : "esp-wrover-kit" ,
"platforms" : "none, freertos-espidf/xl6-esp32/gcc"
} ,
2020-10-18 09:29:01 +01:00
"default-examples-openssl-v3-nogencrypto" : {
"cmake" : "-DLWS_OPENSSL_LIBRARIES=\"/usr/local/src/openssl/v3/usr/local/lib64/libssl.a;/usr/local/src/openssl/v3/usr/local/lib64/libcrypto.a\" -DLWS_OPENSSL_INCLUDE_DIRS=\"/usr/local/src/openssl/v3/usr/local/include/\" -DLWS_WITH_MINIMAL_EXAMPLES=1 -DLWS_WITH_GENCRYPTO=0" ,
"platforms" : "none,linux-fedora-32/x86_64-amd/gcc"
} ,
2021-02-14 06:05:16 +00:00
"default-examples-openssl-v3-gencrypto" : {
"cmake" : "-DLWS_SUPPRESS_DEPRECATED_API_WARNINGS=1 -DLWS_OPENSSL_LIBRARIES=\"/usr/local/src/openssl/v3/usr/local/lib64/libssl.a;/usr/local/src/openssl/v3/usr/local/lib64/libcrypto.a\" -DLWS_OPENSSL_INCLUDE_DIRS=\"/usr/local/src/openssl/v3/usr/local/include/\" -DLWS_WITH_MINIMAL_EXAMPLES=1 -DLWS_WITH_GENCRYPTO=1" ,
"platforms" : "none,linux-fedora-32/x86_64-amd/gcc"
} ,
2020-05-29 11:07:22 +01:00
"default-examples-boringssl" : {
"cmake" : "cmake .. -DLWS_WITH_BORINGSSL=1 -DLWS_OPENSSL_INCLUDE_DIRS=\"/usr/local/src/boringssl/include\" -DLWS_OPENSSL_LIBRARIES=\"/usr/local/src/boringssl/build/ssl/libssl.so;/usr/local/src/boringssl/build/crypto/libcrypto.so\" -DLWS_WITH_MINIMAL_EXAMPLES=1" ,
2020-06-05 08:33:51 +01:00
"platforms" : "none,linux-fedora-32/x86_64-amd/gcc"
2020-05-29 09:51:40 +01:00
} ,
2021-02-08 19:35:47 +00:00
"default-examples-libressl" : {
"cmake" : "cmake .. -DLWS_OPENSSL_LIBRARIES='/opt/libressl-3.3.1/build/tls/libtls.a;/opt/libressl-3.3.1/build/ssl/libssl.a;/opt/libressl-3.3.1/build/crypto/libcrypto.a' -DLWS_OPENSSL_INCLUDE_DIRS=/opt/libressl-3.3.1/include -DLWS_WITH_MINIMAL_EXAMPLES=1" ,
"platforms" : "none,linux-fedora-32/x86_64-amd/gcc"
} ,
2020-08-07 08:42:32 +01:00
"default-wolfssl" : {
2020-08-09 10:15:45 +01:00
"cmake" : "-DLWS_WITH_WOLFSSL=1 -DLWS_WOLFSSL_INCLUDE_DIRS=/usr/local/include -DLWS_WOLFSSL_LIBRARIES=/usr/local/lib/libwolfssl.so" ,
2020-08-07 08:42:32 +01:00
"platforms" : "none,linux-fedora-32/x86_64-amd/gcc"
} ,
2020-04-07 06:35:00 +01:00
"default-examples" : {
2020-04-06 09:58:03 +01:00
"cmake" : "-DLWS_WITH_MINIMAL_EXAMPLES=1" ,
2021-03-08 11:49:46 +00:00
"platforms" : "w10/x86_64-amd/msvc, w10/x86_64-amd/noptmsvc, linux-ubuntu-2004/aarch64-a72-bcm2711-rpi4/gcc, netbsd/aarch64BE-bcm2837-a53/gcc, openbsd/x86_64-amd/llvm, solaris/x86_64-amd/gcc"
2020-04-06 09:58:03 +01:00
} ,
2021-03-25 08:37:36 +00:00
"default-examples-tls-sess" : {
"cmake" : "-DLWS_WITH_MINIMAL_EXAMPLES=1 -DLWS_WITH_TLS_SESSIONS=1" ,
"platforms" : "w10/x86_64-amd/msvc, w10/x86_64-amd/noptmsvc, linux-ubuntu-2004/aarch64-a72-bcm2711-rpi4/gcc, netbsd/aarch64BE-bcm2837-a53/gcc, openbsd/x86_64-amd/llvm, solaris/x86_64-amd/gcc"
} ,
2020-11-18 06:34:16 +00:00
"h1only-examples" : {
"cmake" : "cmake .. -DLWS_WITH_HTTP2=0 -DLWS_WITH_MINIMAL_EXAMPLES=1" ,
"platforms" : "none,linux-fedora-32/x86_64-amd/gcc"
} ,
2020-05-27 09:53:34 +01:00
"unix-domain" : {
"cmake" : "-DUNIX_SOCK=1" ,
2021-01-29 16:28:21 +00:00
"platforms" : "w10/x86_64-amd/msvc, w10/x86_64-amd/noptmsvc"
2020-05-27 09:53:34 +01:00
} ,
2020-10-26 11:12:41 +00:00
"plugins" : {
"cmake" : "-DLWS_WITH_PLUGINS=1" ,
"platforms" : "none,linux-fedora-32/x86_64-amd/gcc,linux-debian-sid/x86-amd/gcc,linux-debian-sid/x86_64-amd/gcc"
} ,
2021-02-14 06:05:16 +00:00
# W A R N _ D E P R E C A T E D d i s a b l e d f o r o p e n s s l v 3 c a s e o n w i n d o w s
2020-04-07 06:35:00 +01:00
"lws_system" : {
2021-02-14 06:05:16 +00:00
"cmake" : "-DLWS_SUPPRESS_DEPRECATED_API_WARNINGS=1 -DLWS_WITH_ACME=1 -DLWS_WITH_MINIMAL_EXAMPLES=1 -DCMAKE_BUILD_TYPE=RELEASE -DLWS_WITH_GENCRYPTO=1 -DLWS_WITH_JOSE=1 -DLWS_WITH_SYS_ASYNC_DNS=1 -DLWS_WITH_SYS_NTPCLIENT=1" ,
2021-02-14 16:04:40 +00:00
"platforms" : "w10/x86_64-amd/msvc, w10/x86_64-amd/noptmsvc, openbsd/x86_64-amd/llvm"
2020-04-06 09:58:03 +01:00
} ,
2020-04-14 19:04:13 +01:00
"secure-streams" : {
2021-02-23 09:15:05 +00:00
"cmake" : "-DLWS_WITH_SECURE_STREAMS=1 -DLWS_WITH_MINIMAL_EXAMPLES=1" ,
2021-03-08 11:49:46 +00:00
"platforms" : "w10/x86_64-amd/msvc, w10/x86_64-amd/noptmsvc, openbsd/x86_64-amd/llvm, solaris/x86_64-amd/gcc"
2020-04-14 19:04:13 +01:00
} ,
"secure-streams-proxy" : {
2020-12-29 16:42:25 -08:00
"cmake" : "-DLWS_WITH_SECURE_STREAMS=1 -DLWS_WITH_SECURE_STREAMS_PROXY_API=1 -DLWS_WITH_MINIMAL_EXAMPLES=1 -DLWS_WITH_SECURE_STREAMS_AUTH_SIGV4=1" ,
2021-03-08 11:49:46 +00:00
"platforms" : "not w10/x86_64-amd/msvc, netbsd/aarch64BE-bcm2837-a53/gcc, openbsd/x86_64-amd/llvm, solaris/x86_64-amd/gcc"
2020-04-14 19:04:13 +01:00
} ,
2021-01-06 15:08:22 +00:00
"secure-streams-proxy-metrics" : {
"cmake" : "-DLWS_WITH_SECURE_STREAMS=1 -DLWS_WITH_SECURE_STREAMS_PROXY_API=1 -DLWS_WITH_MINIMAL_EXAMPLES=1 -DLWS_WITH_SECURE_STREAMS_AUTH_SIGV4=1 -DLWS_WITH_SYS_METRICS=1" ,
"platforms" : "not w10/x86_64-amd/msvc, netbsd/aarch64BE-bcm2837-a53/gcc"
} ,
2021-01-05 08:33:29 +00:00
"distro_recommended" : { # m i n i m a l e x a m p l e s a l s o n e e d e d f o r c t e s t
"cmake" : "-DLWS_WITH_DISTRO_RECOMMENDED=1 -DLWS_WITH_MINIMAL_EXAMPLES=1" ,
2021-01-29 16:28:21 +00:00
"platforms" : "not freebsd-12/x86_64-amd/llvm, not linkit-cross, not w10/x86_64-amd/msvc, linux-ubuntu-2004/aarch64-a72-bcm2711-rpi4/gcc, linux-fedora-32/riscv64-virt/gcc" ,
2020-05-01 05:45:18 +01:00
"cpack" : "&& cpack $SAI_CPACK" ,
2020-04-14 19:04:13 +01:00
"artifacts" : "build/*.rpm, build/*.deb, build/*.zip"
2020-05-01 05:45:18 +01:00
} ,
2020-04-06 09:58:03 +01:00
"lwsws" : {
2020-04-14 19:04:13 +01:00
"cmake" : "-DLWS_WITH_LWSWS=ON -DLWS_WITHOUT_EXTENSIONS=0 -DLWS_WITH_HTTP2=1 -DLWS_WITH_ACME=1 -DLWS_WITH_MINIMAL_EXAMPLES=1 -DCMAKE_BUILD_TYPE=DEBUG -DLWS_WITH_GENCRYPTO=1 -DLWS_WITH_JOSE=1 -DLWS_WITH_SYS_ASYNC_DNS=1 -DLWS_WITH_SYS_NTPCLIENT=1" ,
# n o d i s t r o - d e v e l p a c k a g e f o r l i b u v
2020-06-05 08:33:51 +01:00
"platforms" : "not linux-centos-8/x86_64-amd/gcc"
2020-04-06 09:58:03 +01:00
} ,
2021-01-06 15:08:22 +00:00
"lwsws-nometrics" : {
"cmake" : "-DLWS_WITH_LWSWS=ON -DLWS_WITHOUT_EXTENSIONS=0 -DLWS_WITH_HTTP2=1 -DLWS_WITH_ACME=1 -DLWS_WITH_MINIMAL_EXAMPLES=1 -DCMAKE_BUILD_TYPE=DEBUG -DLWS_WITH_GENCRYPTO=1 -DLWS_WITH_JOSE=1 -DLWS_WITH_SYS_ASYNC_DNS=1 -DLWS_WITH_SYS_NTPCLIENT=1 -DLWS_WITH_SYS_METRICS=0" ,
# n o d i s t r o - d e v e l p a c k a g e f o r l i b u v
"platforms" : "not linux-centos-8/x86_64-amd/gcc"
} ,
2020-04-06 09:58:03 +01:00
"lwsws2" : {
2020-04-14 19:04:13 +01:00
"cmake" : "-DLWS_WITH_LWSWS=ON -DLWS_WITHOUT_EXTENSIONS=0 -DLWS_WITH_HTTP2=1 -DLWS_WITH_ACME=1 -DLWS_WITH_MINIMAL_EXAMPLES=1 -DCMAKE_BUILD_TYPE=DEBUG -DLWS_WITH_LWS_DSH=1" ,
# n o d i s t r o - d e v e l p a c k a g e f o r l i b u v
2020-06-05 08:33:51 +01:00
"platforms" : "not linux-centos-8/x86_64-amd/gcc"
2020-04-06 09:58:03 +01:00
} ,
2020-05-13 10:19:37 +01:00
"justmbedtls" : {
"cmake" : "-DLWS_WITH_MBEDTLS=1 -DLWS_WITHOUT_TESTAPPS=1" ,
2020-06-05 08:33:51 +01:00
"platforms" : "none, linux-android/aarch64/llvm"
2020-05-13 10:19:37 +01:00
} ,
2020-04-06 09:58:03 +01:00
"mbedtls" : {
2020-04-14 19:04:13 +01:00
"cmake" : "-DLWS_WITH_MBEDTLS=1 -DLWS_WITH_HTTP2=1 -DLWS_WITH_LWSWS=1 -DLWS_WITH_MINIMAL_EXAMPLES=1 -DLWS_WITH_JOSE=1 -DCMAKE_BUILD_TYPE=DEBUG" ,
# n o d i s t r o - d e v e l p a c k a g e f o r m b e d t l s
2021-01-21 05:54:16 +00:00
"platforms" : "not linux-centos-7/x86_64-amd/gcc, not linux-centos-8/x86_64-amd/gcc"
2020-04-06 09:58:03 +01:00
} ,
2021-01-06 15:08:22 +00:00
"mbedtls-metrics" : {
"cmake" : "-DLWS_WITH_MBEDTLS=1 -DLWS_WITH_HTTP2=1 -DLWS_WITH_LWSWS=1 -DLWS_WITH_MINIMAL_EXAMPLES=1 -DLWS_WITH_JOSE=1 -DCMAKE_BUILD_TYPE=DEBUG -DLWS_WITH_SYS_METRICS=1" ,
"platforms" : "not linux-centos-7/x86_64-amd/gcc, not linux-centos-8/x86_64-amd/gcc"
} ,
2020-04-06 09:58:03 +01:00
"noserver" : {
2021-02-01 11:48:04 +00:00
"cmake" : "-DLWS_WITHOUT_SERVER=ON -DLWS_WITH_MINIMAL_EXAMPLES=1 -DLWS_WITH_SECURE_STREAMS=1" ,
"platforms" : "w10/x86_64-amd/msvc, w10/x86_64-amd/noptmsvc"
2020-04-06 09:58:03 +01:00
} ,
"noclient" : {
2020-05-01 05:45:18 +01:00
"cmake" : "-DLWS_WITHOUT_CLIENT=ON -DLWS_WITH_MINIMAL_EXAMPLES=1"
2020-04-06 09:58:03 +01:00
} ,
"ext" : {
2020-05-01 05:45:18 +01:00
"cmake" : "-DLWS_WITHOUT_EXTENSIONS=0 -DLWS_WITH_MINIMAL_EXAMPLES=1"
2020-04-06 09:58:03 +01:00
} ,
"nonetwork" : {
"cmake" : "-DLWS_WITH_NETWORK=0"
} ,
"libev" : {
2021-03-16 20:51:31 +00:00
"cmake" : "-DLWS_WITH_LIBEV=ON" ,
"platforms" : "openbsd/x86_64-amd/llvm"
2020-04-06 09:58:03 +01:00
} ,
"libevent" : {
2021-03-16 20:51:31 +00:00
"cmake" : "-DLWS_WITH_LIBEVENT=ON"
2020-04-06 09:58:03 +01:00
} ,
"libglib" : {
2020-05-01 05:45:18 +01:00
"cmake" : "-DLWS_WITH_GLIB=ON"
2020-04-06 09:58:03 +01:00
} ,
2021-01-06 14:15:53 +01:00
"sdevent" : {
"cmake" : "-DLWS_WITH_SDEVENT=ON" ,
"platforms" : "none, linux-fedora-32/x86_64-amd/gcc"
} ,
2021-02-01 11:48:04 +00:00
"uncommon_headers" : {
"cmake" : "-DLWS_WITH_HTTP_BASIC_AUTH=0 -DLWS_WITH_HTTP_UNCOMMON_HEADERS=0 -DLWS_HTTP_HEADERS_ALL=0" ,
"platforms" : "none, linux-fedora-32/x86_64-amd/gcc"
} ,
2020-04-06 09:58:03 +01:00
"ipv6" : {
2020-04-07 06:35:00 +01:00
"cmake" : "-DLWS_IPV6=ON" ,
2021-01-29 16:28:21 +00:00
"platforms" : "w10/x86_64-amd/mingw64, w10/x86_64-amd/msvc"
2020-04-06 09:58:03 +01:00
} ,
2020-10-04 07:28:41 +01:00
"nonetlink" : {
"cmake" : "-DLWS_WITH_NETLINK=0" ,
"platforms" : "none, linux-ubuntu-2004/x86_64-amd/gcc"
} ,
2020-04-06 09:58:03 +01:00
"nossl" : {
2020-05-12 10:00:10 +01:00
"cmake" : "-DLWS_WITH_SSL=OFF" ,
2020-06-05 08:33:51 +01:00
"platforms" : "netbsd-iOS/aarch64/llvm"
2020-04-06 09:58:03 +01:00
} ,
"daemon" : {
2020-05-01 05:45:18 +01:00
"cmake" : "-DLWS_WITHOUT_DAEMONIZE=OFF"
2020-04-06 09:58:03 +01:00
} ,
"cgi" : {
2020-05-01 05:45:18 +01:00
"cmake" : "-DLWS_WITH_CGI=ON"
2020-04-06 09:58:03 +01:00
} ,
"nologs" : {
2020-05-01 05:45:18 +01:00
"cmake" : "-DLWS_WITH_NO_LOGS=ON"
2020-04-06 09:58:03 +01:00
} ,
"smp" : {
2020-05-01 05:45:18 +01:00
"cmake" : "-DLWS_MAX_SMP=32 -DLWS_WITH_MINIMAL_EXAMPLES=1"
2020-04-06 09:58:03 +01:00
} ,
"nows" : {
2020-05-01 05:45:18 +01:00
"cmake" : "-DLWS_ROLE_WS=0"
2020-04-06 09:58:03 +01:00
} ,
"threadpool" : {
2020-04-07 06:35:00 +01:00
"cmake" : "-DLWS_WITH_THREADPOOL=1 -DLWS_WITH_MINIMAL_EXAMPLES=1" ,
2021-01-29 16:28:21 +00:00
"platforms" : "w10/x86_64-amd/msvc"
2020-04-06 09:58:03 +01:00
}
}
}
