Merge branch 'master' of github.com:IETF-Hackathon/pqc-certificates

.github/workflows/artifact_validation.yaml

@@ -22,7 +22,7 @@ jobs:
       - name: Save artifacts
         uses: actions/upload-artifact@v4
         with:
-          name: Compatibility_csv
+          name: Compatibility_oqs_csv
           path: ./output/
   build_results_html:
     runs-on: ubuntu-latest
@@ -44,16 +44,18 @@ jobs:
       - name: Overwrite manually uploaded OQS results with automated results
         uses: actions/download-artifact@v4
         with: 
-          name: Compatibility_csv
-          path: ./providers/oqsprovider/compatMatrices/artifacts_certs_r3
+          name: Compatibility_oqs_csv
+          path: output/certs/oqs
+      - name: Overwrite manually-uploaded OQS results CSVs
+        run: cp ./output/certs/oqs/* ./providers/oqsprovider/compatMatrices/artifacts_certs_r3
       - name: Build compat matrix
         run: ./src/rebuild_results_certs_r3.sh
       - name: Copy output files
-        run: mv ./docs/pqc_hackathon_results_certs_r3.html ./docs/pqc_hackathon_results_certs_r3_automated_tests.html ./docs/pqc_hackathon_results_cms_v1.html ./docs/toUpload
+        run: mv ./docs/pqc_hackathon_results_certs_r3.html ./docs/pqc_hackathon_results_certs_r3_automated_tests.html ./docs/pqc_hackathon_results_cms_v1.html ./docs/gh-pages
       - name: Archive Compatibility Matrix For Download
         uses:  actions/upload-pages-artifact@v3
         with:
-          path: ./docs/toUpload
+          path: ./docs/gh-pages
   publish_to_gh_pages:
     needs: build_results_html
     permissions:

readme.md

@@ -22,7 +22,7 @@ Simply upload your artifacts zip files into your own directory under `providers/
 * Validate your artifacts against the OpenQuantumSafe docker image.
 * Re-build and update the results HTML pages using both the automated results, and any results CSV files that you included.
 
-NOTE: expired certificates within the artifacts zips will show as failed against the OQS automated testing because there is no flag to `openssl verify` to ignore expiry.
+NOTE: expired certificates within the artifacts zips will show as failed against the OQS automated testing because there is no flag to `openssl verify` to ignore expiry. We recommend uploading certs with very long expiry times -- like 10 years or more -- so that they do not start failing one year from now.
 
 ## Folder structure of this repo