diff options
| author | Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | 2020-01-10 14:16:56 +0300 |
|---|---|---|
| committer | Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | 2020-01-10 14:17:08 +0300 |
| commit | 7c422f4b0e5a8625763c7f838be855557a1f658d (patch) | |
| tree | 632cb65e618daef25a821f4de0c328adafebc1ce | |
| parent | 2e52d307be9f971c721a94a908f487df5e8e483b (diff) | |
| download | gnutls-7c422f4b0e5a8625763c7f838be855557a1f658d.tar.gz | |
CI: FIPS140-2 run make check without enforcing FIPS mode
Some distributions might enable --enable-fips140-mode, without actually
enabling/enforcing FIPS at runtime. Catch issues in such configurations
(reported by Daiki Ueno).
Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
| -rw-r--r-- | .gitlab-ci.yml | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml index 29f436596b..e72c39527d 100644 --- a/.gitlab-ci.yml +++ b/.gitlab-ci.yml @@ -195,6 +195,7 @@ FIPS140-2.Fedora.x86_64: - cd build - dash ../configure --disable-gcc-warnings --cache-file ../cache/config.cache --disable-non-suiteb-curves --enable-fips140-mode --disable-doc --disable-full-test-suite --disable-guile - make -j$(nproc) + - make check -j$(nproc) - mkdir -p lib/.libs/fipscheck - fipshmac -d lib/.libs/fipscheck/ -s .hmac lib/.libs/libgnutls.so* - GNUTLS_FORCE_FIPS_MODE=1 make check -j$(nproc) |