summaryrefslogtreecommitdiffstats
path: root/test/recipes/30-test_defltfips.t
blob: c8f145405b2b4e899b7fbecd3f87d7aab79e1b42 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
#! /usr/bin/env perl
# Copyright 2015-2023 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the Apache License 2.0 (the "License").  You may not use
# this file except in compliance with the License.  You can obtain a copy
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html


use strict;
use warnings;

use OpenSSL::Test qw/:DEFAULT srctop_file srctop_dir bldtop_file bldtop_dir data_dir/;
use OpenSSL::Test::Utils;
use Cwd qw(abs_path);

BEGIN {
    setup("test_defltfips");
}

use lib srctop_dir('Configurations');
use lib bldtop_dir('.');

plan skip_all => "Configuration loading is turned off"
    if disabled("autoload-config");

my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);

plan tests =>
    ($no_fips ? 1 : 5);

unless ($no_fips) {
    $ENV{OPENSSL_CONF} = abs_path(srctop_file("test", "fips.cnf"));
    ok(run(test(["defltfips_test", "fips"])), "running defltfips_test fips");

    #Test an alternative way of configuring fips
    $ENV{OPENSSL_CONF} = abs_path(srctop_file("test", "fips-alt.cnf"));
    ok(run(test(["defltfips_test", "fips"])), "running defltfips_test fips");

    #Configured to run FIPS but the module-mac is bad
    $ENV{OPENSSL_CONF} = abs_path(srctop_file("test", "fips.cnf"));
    $ENV{OPENSSL_CONF_INCLUDE} = srctop_dir("test", "recipes", "30-test_defltfips");
    ok(run(test(["defltfips_test", "badfips"])), "running defltfips_test badfips");

    #Test an alternative way of configuring fips (but still with bad module-mac)
    $ENV{OPENSSL_CONF} = abs_path(srctop_file("test", "fips-alt.cnf"));
    ok(run(test(["defltfips_test", "badfips"])), "running defltfips_test badfips");
}

$ENV{OPENSSL_CONF} = abs_path(srctop_file("test", "default.cnf"));
ok(run(test(["defltfips_test"])), "running defltfips_test");