ci: test more feature flag combinations

Author: djc

.github/workflows/ci.yml

@@ -110,9 +110,12 @@ jobs:
       matrix:
         features:
           - # Default
-          - --features=alloc
           - --all-features
           - --no-default-features
+          - --no-default-features --features aws-lc-rs
+          - --no-default-features --features ring
+          - --no-default-features --features alloc,aws-lc-rs
+          - --no-default-features --features alloc,ring
           - --no-default-features --features alloc,std,aws_lc_rs
           - --no-default-features --features alloc,std,ring
 

tests/amazon.rs

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: ISC
-#![cfg(any(feature = "ring", feature = "aws-lc-rs"))]
+#![cfg(all(feature = "alloc", any(feature = "ring", feature = "aws-lc-rs")))]
 
 use core::time::Duration;
 

tests/integration.rs

@@ -49,6 +49,7 @@ fn netflix() {
 }
 
 /// See also https://github.com/rustls/rustls/issues/2448
+#[cfg(feature = "alloc")]
 #[test]
 fn sanofi_rsa_signature_with_absent_algorithm_params() {
     let ee: &[u8] = include_bytes!("sanofi/ee.der");

tests/signatures.rs

@@ -12,7 +12,7 @@
 // ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 // OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 
-#![cfg(any(feature = "ring", feature = "aws-lc-rs"))]
+#![cfg(all(feature = "alloc", any(feature = "ring", feature = "aws-lc-rs")))]
 
 use pki_types::{CertificateDer, SignatureVerificationAlgorithm};
 #[cfg(feature = "ring")]
@@ -35,7 +35,6 @@ use webpki::aws_lc_rs::{
     RSA_PSS_2048_8192_SHA512_LEGACY_KEY,
 };
 
-#[cfg(feature = "alloc")]
 fn check_sig(
     ee: &[u8],
     alg: &dyn SignatureVerificationAlgorithm,
@@ -47,7 +46,6 @@ fn check_sig(
     cert.verify_signature(alg, message, signature)
 }
 
-#[cfg(feature = "alloc")]
 fn check_sig_rpk(
     spki: &[u8],
     alg: &dyn SignatureVerificationAlgorithm,