Use sign v1.3 when fips mode is selected

1 files changed, 17 insertions, 2 deletions

diff --git a/spec/unit/client_spec.rb b/spec/unit/client_spec.rb
index 3b4d23da6e..26cc8f3cf9 100644
--- a/spec/unit/client_spec.rb
+++ b/spec/unit/client_spec.rb
@@ -45,8 +45,23 @@ describe Chef::Client do
   end
 
   describe "authentication protocol selection" do
-    it "defaults to 1.1" do
-      expect(Chef::Config[:authentication_protocol_version]).to eq("1.1")
+    context "when openssl is not compiled with the FIPS module" do
+      it "defaults to 1.1" do
+        expect(Chef::Config[:authentication_protocol_version]).to eq("1.1")
+      end
+    end
+    context "when openssl is compiled with the FIPS module" do
+      before do
+        Chef::Config[:openssl_fips] = true
+      end
+
+      it "defaults to 1.3" do
+        expect(Chef::Config[:authentication_protocol_version]).to eq("1.3")
+      end
+
+      after do
+        Chef::Config[:openssl_fips] = false
+      end
     end
   end