diff options
| author | Daiki Ueno <dueno@redhat.com> | 2020-02-03 05:18:29 +0100 |
|---|---|---|
| committer | Daiki Ueno <dueno@redhat.com> | 2020-02-04 04:45:46 +0100 |
| commit | 900ed847d4cef3f731aac5738fa7db1a81655371 (patch) | |
| tree | ad1a593398c59d855e47e9b3d5ff044389c48e6a | |
| parent | b43e02011320ac98fda6e68515a63f39df4b2d39 (diff) | |
| download | gnutls-tmp-kdf-api.tar.gz | |
tests: skip pkcs12-gost under GNUTLS_FORCE_FIPS_MODEtmp-kdf-api
The MAC algorithm used in the PBKDF2 is actually prohibited in the
FIPS mode and previously there wasn't a check for that.
Signed-off-by: Daiki Ueno <dueno@redhat.com>
| -rwxr-xr-x | tests/cert-tests/pkcs12-gost | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/tests/cert-tests/pkcs12-gost b/tests/cert-tests/pkcs12-gost index 2b5b6bfd79..f7c4bba52b 100755 --- a/tests/cert-tests/pkcs12-gost +++ b/tests/cert-tests/pkcs12-gost @@ -29,6 +29,11 @@ if ! test -x "${CERTTOOL}"; then exit 77 fi +if test "${GNUTLS_FORCE_FIPS_MODE}" = 1;then + echo "Cannot run in FIPS140-2 mode" + exit 77 +fi + if ! test -z "${VALGRIND}"; then VALGRIND="${LIBTOOL:-libtool} --mode=execute ${VALGRIND} --error-exitcode=1" fi |