feat: Modular crypto

.github/workflows/build-modules.yml

@@ -14,10 +14,17 @@ on:
       toolchain:
         required: true
         type: string
+      crypto:
+        required: false
+        type: string
+        default: "ring"
+
+permissions:
+  contents: read
 
 jobs:
   build:
-    name: ${{ inputs.arch }}-${{ inputs.platform }}
+    name: ${{ inputs.arch }}-${{ inputs.platform }}-${{ inputs.crypto }}
     runs-on: ${{ inputs.os }}
     steps:
       - name: Checkout
@@ -26,19 +33,85 @@ jobs:
         uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           toolchain: ${{ inputs.toolchain }}
+      - name: Install Windows OpenSSL
+        if: inputs.platform == 'windows' && inputs.crypto == 'openssl'
+        uses: msys2/setup-msys2@v2
+        with:
+          msystem: MINGW64
+          update: true
+          path-type: inherit
+          install: >-
+            mingw-w64-x86_64-openssl
+            mingw-w64-x86_64-pkgconf
+      - name: Set OpenSSL env for Windows
+        if: inputs.platform == 'windows' && inputs.crypto == 'openssl'
+        shell: bash
+        run: |
+          echo "OPENSSL_DIR=D:/a/_temp/msys64/mingw64" >> $GITHUB_ENV
+          echo "OPENSSL_LIB_DIR=D:/a/_temp/msys64/mingw64/lib" >> $GITHUB_ENV
+          echo "OPENSSL_INCLUDE_DIR=D:/a/_temp/msys64/mingw64/include" >> $GITHUB_ENV
+      - name: Map crypto feature to TLS and crypto features
+        id: features
+        shell: bash
+        run: |
+          case "${{ inputs.crypto }}" in
+            graviola)
+              echo "tls_feature=tls-graviola" >> $GITHUB_OUTPUT
+              echo "crypto_feature=crypto-graviola" >> $GITHUB_OUTPUT
+              ;;
+            ring)
+              echo "tls_feature=tls-ring" >> $GITHUB_OUTPUT
+              echo "crypto_feature=crypto-ring" >> $GITHUB_OUTPUT
+              ;;
+            openssl)
+              echo "tls_feature=tls-openssl" >> $GITHUB_OUTPUT
+              echo "crypto_feature=crypto-openssl" >> $GITHUB_OUTPUT
+              if [ "${{ inputs.platform }}" != "windows" ]; then
+                echo "extra_features=,openssl-vendored" >> $GITHUB_OUTPUT
+              fi
+              ;;
+            aws-lc)
+              echo "tls_feature=tls-aws-lc" >> $GITHUB_OUTPUT
+              echo "crypto_feature=crypto-ring" >> $GITHUB_OUTPUT
+              ;;
+            *)
+              echo "Unknown crypto feature: ${{ inputs.crypto }}"
+              exit 1
+              ;;
+          esac
       - name: Run build crates
         shell: bash
         env:
           RUSTFLAGS: ""
+          TLS_FEATURE: ${{ steps.features.outputs.tls_feature }}
+          CRYPTO_FEATURE: ${{ steps.features.outputs.crypto_feature }}
         run: |
           crates=$(cargo metadata --no-deps --format-version 1 --quiet | jq -r '.packages[] | select(.manifest_path | contains("modules/")) | .name')
           for crate in $crates; do
             echo "Compiling crate: $crate"
-            cargo build -p "$crate"
+            if [ "$crate" = "llrt_fetch" ]; then
+              cargo build -p "$crate" --no-default-features --features "http1,http2,webpki-roots,compression-rust,$TLS_FEATURE"
+            elif [ "$crate" = "llrt_http" ]; then
+              cargo build -p "$crate" --no-default-features --features "http1,http2,webpki-roots,$TLS_FEATURE"
+            elif [ "$crate" = "llrt_crypto" ]; then
+              cargo build -p "$crate" --no-default-features --features "$CRYPTO_FEATURE"
+            else
+              cargo build -p "$crate"
+            fi
           done
       - name: Run build all
+        shell: bash
+        env:
+          TLS_FEATURE: ${{ steps.features.outputs.tls_feature }}
+          CRYPTO_FEATURE: ${{ steps.features.outputs.crypto_feature }}
+          EXTRA_FEATURES: ${{ steps.features.outputs.extra_features }}
         run: |
-          cargo build -p llrt_modules
+          cargo build -p llrt_modules --no-default-features --features "base,$TLS_FEATURE,$CRYPTO_FEATURE$EXTRA_FEATURES"
       - name: Run tests all
+        shell: bash
+        env:
+          TLS_FEATURE: ${{ steps.features.outputs.tls_feature }}
+          CRYPTO_FEATURE: ${{ steps.features.outputs.crypto_feature }}
+          EXTRA_FEATURES: ${{ steps.features.outputs.extra_features }}
         run: |
-          cargo test -p llrt_modules
+          cargo test -p llrt_modules --no-default-features --features "base,$TLS_FEATURE,$CRYPTO_FEATURE$EXTRA_FEATURES"

.github/workflows/build.yml

@@ -18,11 +18,15 @@ on:
         required: false
         type: string
         default: "nightly"
+      crypto:
+        required: false
+        type: string
+        default: ""
 
 jobs:
   build:
     runs-on: ${{ inputs.os }}
-    name: build ${{ inputs.arch }}-${{ inputs.platform }}
+    name: build ${{ inputs.arch }}-${{ inputs.platform }}${{ inputs.crypto && format('-{0}', inputs.crypto) || '' }}
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -79,13 +83,44 @@ jobs:
         uses: actions-rust-lang/setup-rust-toolchain@v1
         with:
           toolchain: ${{ inputs.toolchain }}
+      - name: Map crypto to features
+        id: features
+        if: inputs.crypto != ''
+        shell: bash
+        run: |
+          case "${{ inputs.crypto }}" in
+            graviola)
+              echo "cargo_features=--no-default-features --features macro,crypto-graviola-rust,tls-graviola" >> $GITHUB_OUTPUT
+              ;;
+            ring)
+              echo "cargo_features=--no-default-features --features macro,crypto-ring-rust,tls-ring" >> $GITHUB_OUTPUT
+              ;;
+            openssl)
+              if [ "${{ inputs.platform }}" = "windows" ]; then
+                echo "cargo_features=--no-default-features --features macro,crypto-openssl,tls-openssl" >> $GITHUB_OUTPUT
+              else
+                echo "cargo_features=--no-default-features --features macro,crypto-openssl,tls-openssl,openssl-vendored" >> $GITHUB_OUTPUT
+              fi
+              ;;
+            aws-lc)
+              echo "cargo_features=--no-default-features --features macro,crypto-rust,tls-aws-lc" >> $GITHUB_OUTPUT
+              ;;
+            *)
+              echo "Unknown crypto: ${{ inputs.crypto }}"
+              exit 1
+              ;;
+          esac
       - name: Run tests
         if: inputs.platform != 'windows'
+        env:
+          CARGO_FEATURES: ${{ steps.features.outputs.cargo_features }}
         run: |
           make test-ci 2>&1
       - name: Run tests on windows
         if: inputs.platform == 'windows'
         shell: msys2 {0}
+        env:
+          CARGO_FEATURES: ${{ steps.features.outputs.cargo_features }}
         run: |
           make test-ci 2>&1
       - name: Build Linux binaries

.github/workflows/ci.yml

@@ -29,69 +29,190 @@ jobs:
           for i in {1..5}; do
             echo "console.log(123);" > "bundle/js/test$i.js"
           done
-          cargo clippy --all-targets --all-features -- -D warnings
+          cargo clippy --all-targets -- -D warnings
   build:
     needs:
       - check
     strategy:
       fail-fast: ${{ startsWith(github.ref, 'refs/tags/') }}
       matrix:
         include:
-          - os: windows-latest
-            platform: windows
+          # Ubuntu x64
+          - os: ubuntu-latest
+            platform: linux
             arch: x86_64
-            toolchain: nightly-x86_64-pc-windows-gnu
+            toolchain: nightly
+            crypto: ring
           - os: ubuntu-latest
             platform: linux
             arch: x86_64
             toolchain: nightly
+            crypto: aws-lc
+          - os: ubuntu-latest
+            platform: linux
+            arch: x86_64
+            toolchain: nightly
+            crypto: graviola
+          - os: ubuntu-latest
+            platform: linux
+            arch: x86_64
+            toolchain: nightly
+            crypto: openssl
+          # Ubuntu arm64
+          - os: ubuntu-24.04-arm
+            platform: linux
+            arch: aarch64
+            toolchain: nightly
+            crypto: ring
           - os: ubuntu-24.04-arm
             platform: linux
             arch: aarch64
             toolchain: nightly
+            crypto: aws-lc
+          - os: ubuntu-24.04-arm
+            platform: linux
+            arch: aarch64
+            toolchain: nightly
+            crypto: graviola
+          - os: ubuntu-24.04-arm
+            platform: linux
+            arch: aarch64
+            toolchain: nightly
+            crypto: openssl
+          # macOS arm64
           - os: macos-latest
             platform: darwin
-            arch: x86_64
+            arch: aarch64
+            toolchain: nightly
+            crypto: ring
+          - os: macos-latest
+            platform: darwin
+            arch: aarch64
+            toolchain: nightly
+            crypto: aws-lc
+          - os: macos-latest
+            platform: darwin
+            arch: aarch64
             toolchain: nightly
+            crypto: graviola
           - os: macos-latest
             platform: darwin
             arch: aarch64
             toolchain: nightly
+            crypto: openssl
+          # Windows x64 (ring, openssl, graviola - no aws-lc)
+          - os: windows-latest
+            platform: windows
+            arch: x86_64
+            toolchain: nightly-x86_64-pc-windows-gnu
+            crypto: ring
+          - os: windows-latest
+            platform: windows
+            arch: x86_64
+            toolchain: nightly-x86_64-pc-windows-gnu
+            crypto: openssl
+          - os: windows-latest
+            platform: windows
+            arch: x86_64
+            toolchain: nightly-x86_64-pc-windows-gnu
+            crypto: graviola
     uses: ./.github/workflows/build.yml
     with:
       os: ${{ matrix.os }}
       platform: ${{ matrix.platform }}
       arch: ${{ matrix.arch }}
       toolchain: ${{ matrix.toolchain }}
+      crypto: ${{ matrix.crypto }}
   modules:
     needs:
       - check
     strategy:
+      fail-fast: false
       matrix:
         include:
+          # Ubuntu x64
+          - os: ubuntu-latest
+            platform: linux
+            arch: x86_64
+            toolchain: stable
+            crypto: ring
+          - os: ubuntu-latest
+            platform: linux
+            arch: x86_64
+            toolchain: stable
+            crypto: aws-lc
           - os: ubuntu-latest
             platform: linux
             arch: x86_64
             toolchain: stable
+            crypto: graviola
+          - os: ubuntu-latest
+            platform: linux
+            arch: x86_64
+            toolchain: stable
+            crypto: openssl
+          # Ubuntu arm64
+          - os: ubuntu-24.04-arm
+            platform: linux
+            arch: aarch64
+            toolchain: stable
+            crypto: ring
+          - os: ubuntu-24.04-arm
+            platform: linux
+            arch: aarch64
+            toolchain: stable
+            crypto: aws-lc
           - os: ubuntu-24.04-arm
             platform: linux
             arch: aarch64
             toolchain: stable
+            crypto: graviola
+          - os: ubuntu-24.04-arm
+            platform: linux
+            arch: aarch64
+            toolchain: stable
+            crypto: openssl
+          # macOS arm64
           - os: macos-latest
             platform: darwin
-            arch: x86_64
+            arch: aarch64
+            toolchain: stable
+            crypto: ring
+          - os: macos-latest
+            platform: darwin
+            arch: aarch64
+            toolchain: stable
+            crypto: aws-lc
+          - os: macos-latest
+            platform: darwin
+            arch: aarch64
             toolchain: stable
+            crypto: graviola
           - os: macos-latest
             platform: darwin
             arch: aarch64
             toolchain: stable
+            crypto: openssl
+          # Windows x64 (ring, openssl, graviola - no aws-lc)
+          - os: windows-latest
+            platform: windows
+            arch: x86_64
+            toolchain: stable-x86_64-pc-windows-gnu
+            crypto: ring
+          - os: windows-latest
+            platform: windows
+            arch: x86_64
+            toolchain: stable-x86_64-pc-windows-gnu
+            crypto: openssl
           - os: windows-latest
             platform: windows
             arch: x86_64
             toolchain: stable-x86_64-pc-windows-gnu
+            crypto: graviola
     uses: ./.github/workflows/build-modules.yml
     with:
       os: ${{ matrix.os }}
       platform: ${{ matrix.platform }}
       arch: ${{ matrix.arch }}
       toolchain: ${{ matrix.toolchain }}
+      crypto: ${{ matrix.crypto }}