From e5876b0332070fa509c0936059a6d8d6e1af5b89 Mon Sep 17 00:00:00 2001 From: Daiki Ueno Date: Mon, 3 Feb 2020 05:18:29 +0100 Subject: tests: skip pkcs12-gost under GNUTLS_FORCE_FIPS_MODE The MAC algorithm used in the PBKDF2 is actually prohibited in the FIPS mode and previously there wasn't a check for that. Signed-off-by: Daiki Ueno --- tests/cert-tests/pkcs12-gost | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tests/cert-tests/pkcs12-gost b/tests/cert-tests/pkcs12-gost index 2b5b6bfd79..f7c4bba52b 100755 --- a/tests/cert-tests/pkcs12-gost +++ b/tests/cert-tests/pkcs12-gost @@ -29,6 +29,11 @@ if ! test -x "${CERTTOOL}"; then exit 77 fi +if test "${GNUTLS_FORCE_FIPS_MODE}" = 1;then + echo "Cannot run in FIPS140-2 mode" + exit 77 +fi + if ! test -z "${VALGRIND}"; then VALGRIND="${LIBTOOL:-libtool} --mode=execute ${VALGRIND} --error-exitcode=1" fi -- cgit v1.2.1