diff options
| author | Daiki Ueno <dueno@redhat.com> | 2020-02-03 05:18:29 +0100 |
|---|---|---|
| committer | Daiki Ueno <dueno@redhat.com> | 2020-02-04 10:29:37 +0100 |
| commit | e5876b0332070fa509c0936059a6d8d6e1af5b89 (patch) | |
| tree | 9a972e683c9b3c0b903b98705caa72ef0c9c2de2 | |
| parent | 4f11a7ca4baafa76607f70627c2e9a44ca6dc4f2 (diff) | |
| download | gnutls-e5876b0332070fa509c0936059a6d8d6e1af5b89.tar.gz | |
tests: skip pkcs12-gost under GNUTLS_FORCE_FIPS_MODE
The MAC algorithm used in the PBKDF2 is actually prohibited in the
FIPS mode and previously there wasn't a check for that.
Signed-off-by: Daiki Ueno <dueno@redhat.com>
| -rwxr-xr-x | tests/cert-tests/pkcs12-gost | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/tests/cert-tests/pkcs12-gost b/tests/cert-tests/pkcs12-gost index 2b5b6bfd79..f7c4bba52b 100755 --- a/tests/cert-tests/pkcs12-gost +++ b/tests/cert-tests/pkcs12-gost @@ -29,6 +29,11 @@ if ! test -x "${CERTTOOL}"; then exit 77 fi +if test "${GNUTLS_FORCE_FIPS_MODE}" = 1;then + echo "Cannot run in FIPS140-2 mode" + exit 77 +fi + if ! test -z "${VALGRIND}"; then VALGRIND="${LIBTOOL:-libtool} --mode=execute ${VALGRIND} --error-exitcode=1" fi |