diff options
Diffstat (limited to 'tests/resume.c')
| -rw-r--r-- | tests/resume.c | 19 |
1 files changed, 15 insertions, 4 deletions
diff --git a/tests/resume.c b/tests/resume.c index d307ee2acc..83e750af66 100644 --- a/tests/resume.c +++ b/tests/resume.c @@ -90,6 +90,7 @@ struct params_res { int change_ciphersuite; int early_start; int no_early_start; + int no_fips; }; pid_t child; @@ -125,14 +126,16 @@ struct params_res resume_tests[] = { .enable_session_ticket_client = ST_NONE, .expect_resume = 0, .first_no_ext_master = 0, - .second_no_ext_master = 1}, + .second_no_ext_master = 1, + .no_fips = 1}, {.desc = "try to resume from db (none -> ext master secret)", .enable_db = 1, .enable_session_ticket_server = ST_NONE, .enable_session_ticket_client = ST_NONE, .expect_resume = 0, .first_no_ext_master = 1, - .second_no_ext_master = 0}, + .second_no_ext_master = 0, + .no_fips = 1}, # endif # if defined(TLS13) /* only makes sense under TLS1.3 as negotiation involves a new @@ -214,7 +217,8 @@ struct params_res resume_tests[] = { .enable_session_ticket_client = ST_ALL, .expect_resume = 0, .first_no_ext_master = 0, - .second_no_ext_master = 1}, + .second_no_ext_master = 1, + .no_fips = 1}, {.desc = "try to resume from session ticket (none -> ext master secret)", .enable_db = 0, @@ -222,7 +226,8 @@ struct params_res resume_tests[] = { .enable_session_ticket_client = ST_ALL, .expect_resume = 0, .first_no_ext_master = 1, - .second_no_ext_master = 0}, + .second_no_ext_master = 0, + .no_fips = 1}, {.desc = "try to resume from session ticket (server only)", .enable_db = 0, .enable_session_ticket_server = ST_ALL, @@ -967,6 +972,12 @@ void doit(void) int client_sds[SESSIONS], server_sds[SESSIONS]; int j; + if (resume_tests[i].no_fips && gnutls_fips140_mode_enabled()) { + success("skipping %s under FIPS mode\n", + resume_tests[i].desc); + continue; + } + printf("%s\n", resume_tests[i].desc); for (j = 0; j < SESSIONS; j++) { |