diff options
| author | Tomas Mraz <tomas@openssl.org> | 2024-05-09 10:48:56 +0200 |
|---|---|---|
| committer | Tomas Mraz <tomas@openssl.org> | 2024-05-14 18:12:03 +0200 |
| commit | 843d42b800df630906807f6ac71fb64d0f4f4389 (patch) | |
| tree | 6382e26fd2a9736d533124a61363d4c44bc7c807 | |
| parent | fa30357f3bd86dc190af821689762be1aadaeac6 (diff) | |
sslapitest.c: With fips skip tests depending on X25519 and X448
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/24347)
(cherry picked from commit f6e469808501f52c7e8f8679d6c3290cf1c258b3)
| -rw-r--r-- | test/sslapitest.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/test/sslapitest.c b/test/sslapitest.c index 98d2e732ea..dae797ef00 100644 --- a/test/sslapitest.c +++ b/test/sslapitest.c @@ -4948,10 +4948,14 @@ static int test_key_exchange(int idx) break; # ifndef OPENSSL_NO_ECX case 4: + if (is_fips) + return TEST_skip("X25519 might not be supported by fips provider."); kexch_alg = NID_X25519; kexch_name0 = "x25519"; break; case 5: + if (is_fips) + return TEST_skip("X448 might not be supported by fips provider."); kexch_alg = NID_X448; kexch_name0 = "x448"; break; @@ -5170,6 +5174,9 @@ static int test_negotiated_group(int idx) else expectednid = kexch_alg; + if (is_fips && (kexch_alg == NID_X25519 || kexch_alg == NID_X448)) + return TEST_skip("X25519 and X448 might not be available in fips provider."); + if (!istls13) max_version = TLS1_2_VERSION; |