From 623cddb2bae43e6d2fb8bfadb6280ec86abcdc97 Mon Sep 17 00:00:00 2001
From: Andreas Ebner <andreas.ebner@o6-automation.com>
Date: Tue, 22 Sep 2026 15:22:25 +0200
Subject: [PATCH] ci: test PubSub security and SKS with OpenSSL

The PubSub encryption and SKS jobs take the backend as argument and run
with OpenSSL as well. The release amalgamation build drops the removed
UA_ENABLE_PUBSUB_ENCRYPTION flag.
---
 .github/workflows/build_linux.yml | 12 ++++++++++--
 tools/ci/linux/ci.sh              |  7 +++----
 2 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/build_linux.yml b/.github/workflows/build_linux.yml
index 3ef133ffd..eaa5ff5e6 100644
--- a/.github/workflows/build_linux.yml
+++ b/.github/workflows/build_linux.yml
@@ -112,17 +112,25 @@ jobs:
 
           - name: "PubSub Encryption (MbedTLS) Build & Unit Tests (gcc)"
             mbedtls: true
-            cmd_action: unit_tests_encryption_mbedtls_pubsub
+            cmd_action: unit_tests_encryption_pubsub MBEDTLS
 
           - name: "PubSub SKS Build & Unit Tests (gcc)"
             mbedtls: true
             cmd_deps: sudo apt-get install -y -qq valgrind
-            cmd_action: unit_tests_pubsub_sks
+            cmd_action: unit_tests_pubsub_sks MBEDTLS
 
           - name: "Encryption (OpenSSL) Build & Unit Tests (gcc)"
             cmd_deps: sudo apt-get install -y -qq openssl
             cmd_action: unit_tests_encryption OPENSSL
 
+          - name: "PubSub Encryption (OpenSSL) Build & Unit Tests (gcc)"
+            cmd_deps: sudo apt-get install -y -qq openssl
+            cmd_action: unit_tests_encryption_pubsub OPENSSL
+
+          - name: "PubSub SKS (OpenSSL) Build & Unit Tests (gcc)"
+            cmd_deps: sudo apt-get install -y -qq openssl valgrind
+            cmd_action: unit_tests_pubsub_sks OPENSSL
+
           - name: "Encryption (LibreSSL) Build & Unit Tests (gcc)"
             cmd_deps: |
               sudo apt-get install -y -qq curl
diff --git a/tools/ci/linux/ci.sh b/tools/ci/linux/ci.sh
index ae4ec54ac..ee19968de 100644
--- a/tools/ci/linux/ci.sh
+++ b/tools/ci/linux/ci.sh
@@ -113,7 +113,6 @@ function build_release_amalgamation {
           -DUA_ENABLE_DATATYPES_ALL=ON \
           -DUA_ENABLE_ENCRYPTION=MBEDTLS \
           -DUA_ENABLE_PUBSUB=ON \
-          -DUA_ENABLE_PUBSUB_ENCRYPTION=ON \
           -DUA_ENABLE_PUBSUB_INFORMATIONMODEL=ON \
           ..
     make open62541-amalgamation ${MAKEOPTS}
@@ -578,13 +577,13 @@ function unit_tests_encryption {
     make gcov
 }
 
-function unit_tests_encryption_mbedtls_pubsub {
+function unit_tests_encryption_pubsub {
     rm -rf build; mkdir -p build; cd build
     cmake -DCMAKE_BUILD_TYPE=Debug \
           -DUA_BUILD_EXAMPLES=ON \
           -DUA_BUILD_UNIT_TESTS=ON \
           -DUA_ENABLE_COVERAGE=ON \
-          -DUA_ENABLE_ENCRYPTION=MBEDTLS \
+          -DUA_ENABLE_ENCRYPTION=$1 \
           -DUA_ENABLE_PUBSUB=ON \
           -DUA_ENABLE_PUBSUB_INFORMATIONMODEL=ON \
           -DUA_FORCE_WERROR=ON \
@@ -602,7 +601,7 @@ function unit_tests_pubsub_sks {
           -DUA_BUILD_EXAMPLES=ON \
           -DUA_BUILD_UNIT_TESTS=ON \
           -DUA_ENABLE_COVERAGE=ON \
-          -DUA_ENABLE_ENCRYPTION=MBEDTLS \
+          -DUA_ENABLE_ENCRYPTION=$1 \
           -DUA_ENABLE_PUBSUB=ON \
           -DUA_ENABLE_PUBSUB_INFORMATIONMODEL=ON \
           -DUA_ENABLE_PUBSUB_SKS=ON \