From 2ae3b0b22cc58eb41da8a1d362bfbc39cfb6ad67 Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Thu, 9 May 2024 10:48:56 +0200 Subject: sslapitest.c: With fips skip tests depending on X25519 and X448 Reviewed-by: Paul Dale Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/24347) (cherry picked from commit f6e469808501f52c7e8f8679d6c3290cf1c258b3) --- test/sslapitest.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/test/sslapitest.c b/test/sslapitest.c index f622d25130..cbbe70cc9a 100644 --- a/test/sslapitest.c +++ b/test/sslapitest.c @@ -4914,10 +4914,14 @@ static int test_key_exchange(int idx) kexch_name0 = "secp521r1"; break; case 4: + if (is_fips) + return TEST_skip("X25519 might not be supported by fips provider."); kexch_alg = NID_X25519; kexch_name0 = "x25519"; break; case 5: + if (is_fips) + return TEST_skip("X448 might not be supported by fips provider."); kexch_alg = NID_X448; kexch_name0 = "x448"; break; @@ -5132,6 +5136,9 @@ static int test_negotiated_group(int idx) else expectednid = kexch_alg; + if (is_fips && (kexch_alg == NID_X25519 || kexch_alg == NID_X448)) + return TEST_skip("X25519 and X448 might not be available in fips provider."); + if (!istls13) max_version = TLS1_2_VERSION; -- cgit v1.2.3