ci: build native crypto lib with --features crypto

ober

ff2147832ac62e86f5bee102fef8ffb926a11566

diff --git a/.build.yml b/.build.yml
index 3c5a776..5041d54 100644
--- a/.build.yml
+++ b/.build.yml
@@ -67,7 +67,11 @@ tasks:
         | sh -s -- -y --profile minimal --default-toolchain stable
       export PATH="$HOME/.cargo/bin:$PATH"
       JH="$(jerbuild --jerboa-home)"
-      cargo build --release --manifest-path "$JH/jerboa-native-rs/Cargo.toml"
+      # The crypto FFI exports (jerboa_sha*, _aead_*, _hmac_*, …) are behind the
+      # crate's "crypto" Cargo feature; a default build omits them. crypto's deps
+      # are pure-Rust, so no system libs are needed.
+      cargo build --release --no-default-features --features crypto \
+        --manifest-path "$JH/jerboa-native-rs/Cargo.toml"
       ls -l "$JH"/jerboa-native-rs/target/release/libjerboa_native.* || true
   - verify: |
       cd jerboa-browser
diff --git a/Makefile b/Makefile
index 8aca524..4a83347 100644
--- a/Makefile
+++ b/Makefile
@@ -22,7 +22,8 @@ lib/libjerboa_native.$(SOEXT):
 	@src="$(JH)/jerboa-native-rs/target/release/libjerboa_native.$(SOEXT)"; \
 	 if [ ! -f "$$src" ] && [ -f "$(JH)/jerboa-native-rs/Cargo.toml" ]; then \
 	   echo "building libjerboa_native via cargo (one-time)..."; \
-	   cargo build --release --manifest-path "$(JH)/jerboa-native-rs/Cargo.toml"; \
+	   cargo build --release --no-default-features --features crypto \
+	     --manifest-path "$(JH)/jerboa-native-rs/Cargo.toml"; \
 	 fi; \
 	 if [ -f "$$src" ]; then ln -sf "$$src" "$@" && echo "staged $@ -> $$src"; \
 	 else echo "note: libjerboa_native.$(SOEXT) unavailable; crypto tests may fail"; fi