diff options
author | Pauli <pauli@openssl.org> | 2022-11-14 13:15:43 +1100 |
---|---|---|
committer | Pauli <pauli@openssl.org> | 2022-11-15 05:12:24 +1100 |
commit | c3e8128befa7b4d8463d13d35eafdaf950531c43 (patch) | |
tree | dc22142b7c5e2c0b17f48b94a015f6bc32f18e2f | |
parent | 00cd0627252a3159cde4818d4763103af19dad82 (diff) |
fipsinstall test: skip PCT DSA signature test for new providers
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/19665)
-rw-r--r-- | test/recipes/03-test_fipsinstall.t | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/test/recipes/03-test_fipsinstall.t b/test/recipes/03-test_fipsinstall.t index 007e1be821..c39b2cee09 100644 --- a/test/recipes/03-test_fipsinstall.t +++ b/test/recipes/03-test_fipsinstall.t @@ -28,6 +28,7 @@ plan tests => 29; my $infile = bldtop_file('providers', platform->dso('fips')); my $fipskey = $ENV{FIPSKEY} // config('FIPSKEY') // '00'; +my $provconf = srctop_file("test", "fips-and-base.cnf"); # Read in a text $infile and replace the regular expression in $srch with the # value in $repl and output to a new file $outfile. @@ -230,6 +231,12 @@ SKIP: { SKIP: { skip "Skipping Signature DSA corruption test because of no dsa in this build", 1 if disabled("dsa"); + + run(test(["fips_version_test", "-config", $provconf, "<3.1.0"]), + capture => 1, statusvar => \my $exit); + skip "FIPS provider version is too new for PCT DSA signature test", 1 + if !$exit; + ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.cnf', '-module', $infile, '-provider_name', 'fips', '-mac_name', 'HMAC', '-macopt', 'digest:SHA256', '-macopt', "hexkey:$fipskey", |