Deploy test server about oqs-provider HOT 8 CLOSED

The test server based on liboqs-0.8.0-rc1 is now ready at https://test.openquantumsafe.org.

For now it's based on oqs-provider/main. Will update to a oqs-provider release tag once ready.

I did a test run (https://github.com/open-quantum-safe/oqs-demos/blob/bhe-nginx-serverupd/nginx/fulltest-provider/testrun.sh), and all tests passed.

The ports offered by the test server are now restricted to Signartures+KEMs with matching security levels (exceptions are the pure rsa/ecdsa signatures as baseline).

Not sure if makes sense to advertise the Chromium-ready test ports as there seems to be no build against 0.8.0 at the moment. So I removed the Chromium page for now.

Related PRs: #173, open-quantum-safe/oqs-demos#204

from oqs-provider.

@bhess As a follow-up to our email conversation I now assigned this to you as I don't have access to the test server any more. Please confirm that you'll be able to have this complete by the end of next week as part of our liboqs release (confirmation) cycle.

from oqs-provider.

Thanks @baentsch, will look into it next week.

from oqs-provider.

Should there be (or is there already something like) a common.py for oqs-provider?
The script for OpenSSL 1.1.1 contains python structures with the available KEMs, Signatures and helper functions to create keys and certs, which is used by the deployment scripts for the test server. The alternative I see is to load generate.yml and create the algorithm list again, but there seems quite some logic involved in generate.py that I think is better not to replicate. @baentsch

from oqs-provider.

So I removed the Chromium page for now.

Perfect for me: We're not really supporting it, so we should drop the appearance of that, too.

from oqs-provider.

@bhess: Release is tagged. Will mark final if you can close this issue after correct testing.

from oqs-provider.

https://test.openquantumsafe.org is updated with liboqs 0.8.0 and oqs-provider 0.5.0, which includes generating the config using openssl list.

After a run with https://github.com/open-quantum-safe/oqs-demos/blob/bhe-nginx-serverupd/nginx/fulltest-provider/testrun.sh and the oqsprovider/curl image, all tests except the new x25519_kyber768 and p256_kyber768 hybrids pass. It looks like curl in the image doesn't support them yet. I also built a local version of the curl docker image, there everything works fine.

from oqs-provider.

Thanks for integration and test -- open-quantum-safe/oqs-demos#206 added to fix curl docker image for good and #181 to avoid this from happening again. This then closes this issue out.

from oqs-provider.