Build/test APE

.github/test.bat

@@ -0,0 +1,3 @@
+eactest.com
+cvc-create.com --help
+cvc-print.com --help

.github/test.sh

@@ -0,0 +1,12 @@
+#!/bin/sh
+
+# CI script to test on unix like systems
+
+set -ex -o xtrace
+
+chmod a+x *.com
+./eactest.com
+openssl ecparam -out ZZATCVCA00001.pem -name prime192v1 -genkey -param_enc explicit
+openssl pkcs8 -topk8 -nocrypt -in ZZATCVCA00001.pem -outform DER -out ZZATCVCA00001.pkcs8
+./cvc-create.com --role=cvca --type=at --chr=ZZATCVCA00001 --expires=991231 --sign-with=ZZATCVCA00001.pkcs8 --scheme=ECDSA_SHA_256 --rid
+./cvc-print.com --cvc=ZZATCVCA00001.cvcert --disable-cvc-verification

.github/workflows/ape.yml

@@ -0,0 +1,58 @@
+name: Actually Portable Executable
+
+on:
+  pull_request:
+    paths:
+      - '**.c'
+      - '**.h'
+      - '**.i'
+      - '**.in'
+      - '**.sh'
+      - '**.py'
+      - '**.go'
+      - '**.java'
+      - '**.rb'
+      - .github/workflows/ape.yml
+  push:
+
+
+permissions:  # added using https://github.com/step-security/secure-repo
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    steps:
+    - uses: actions/checkout@v4
+    - run: .github/build.sh ape
+    - uses: actions/upload-artifact@v4
+      with:
+        name: openpace-${{ github.ref_name }}-bin
+        path:
+          openpace-bin
+
+  test-unix:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-24.04, ubuntu-24.04-arm, macos-15, macos-15-intel, macos-26, macos-26-intel]
+    name: test-${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    needs: build
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/download-artifact@v5
+      - run: .github/test.sh
+
+  test-windows:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [windows-2022, windows-2025, windows-11-arm]
+    name: test-${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    needs: build
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/download-artifact@v5
+      - run: .github/test.bat

.github/workflows/coverity.yml

@@ -1,4 +1,4 @@
-name: Coverity CI
+name: Coverity Scan
 
 # We only want to test master or explicitly via coverity branch
 on:

.github/workflows/macos.yml

@@ -1,4 +1,4 @@
-name: macOS CI
+name: macOS
 
 on:
   pull_request:
@@ -25,8 +25,3 @@ jobs:
     steps:
     - uses: actions/checkout@v4
     - run: .github/build.sh macos
-    - uses: actions/upload-artifact@v4
-      with:
-        name: openpace-dmg
-        path:
-          openpace*.dmg

.github/workflows/ubuntu.yml

@@ -1,4 +1,4 @@
-name: Ubuntu CI
+name: Ubuntu
 
 on:
   pull_request:
@@ -27,17 +27,6 @@ jobs:
     - run: .github/build.sh ubuntu
     - uses: actions/upload-artifact@v4
       with:
-        name: openpace
+        name: openpace-${{ github.ref_name }}-src
         path:
           openpace*.tar.gz
-
-  build-ape:
-    runs-on: ubuntu-24.04
-    steps:
-    - uses: actions/checkout@v4
-    - run: .github/build.sh ape
-    - uses: actions/upload-artifact@v4
-      with:
-        name: openpace-bin
-        path:
-          openpace-bin

Makefile.am

@@ -1,7 +1,7 @@
 ACLOCAL_AMFLAGS = -I m4
 SUBDIRS = src bindings
 
-EXTRA_DIST = libeac.pc.in bootstrap generate-eac-pki.sh docs appveyor.yml NEWS.md
+EXTRA_DIST = libeac.pc.in bootstrap generate-eac-pki.sh docs appveyor.yml
 DISTCHECK_CONFIGURE_FLAGS = --enable-java --enable-python --disable-openssl-install
 
 if WIN32

SECURITY.md

@@ -5,8 +5,8 @@
 | Version                                                    | Supported          |
 | ---------------------------------------------------------- | ------------------ |
 | https://github.com/frankmorgner/openpace/releases/latest   | :white_check_mark: |
-| < latest release version                                   | :x:                |
+| all previous versions                                      | :x:                |
 
 ## Reporting a Vulnerability
 
-Please report vulnerabilities to frankmorgner@gmail.com; you can expect a response within one week.
+Please report vulnerabilities at the project's [security page](https://github.com/frankmorgner/openpace/security/advisories/new); you can expect a response within one week.

configure.ac

@@ -2,7 +2,7 @@
 # Process this file with autoconf to produce a configure script.
 
 AC_PREREQ([2.67])
-AC_INIT([OpenPACE], [1.1.3], [https://github.com/frankmorgner/openpace/issues], [openpace], [http://frankmorgner.github.io/openpace/])
+AC_INIT([OpenPACE], [1.1.4], [https://github.com/frankmorgner/openpace/issues], [openpace], [http://frankmorgner.github.io/openpace/])
 AC_CONFIG_SRCDIR([src/eactest.c])
 AC_CONFIG_HEADERS([config.h])
 AC_CONFIG_MACRO_DIR([m4])