aboutsummaryrefslogtreecommitdiffstats
path: root/test/openssl
diff options
context:
space:
mode:
authorJun Aruga <jaruga@redhat.com>2023-04-17 19:05:48 +0200
committerJun Aruga <jaruga@redhat.com>2023-06-01 12:22:28 +0200
commit8149cdf6e874214f9349f1f236b003d9239228f9 (patch)
treea146c6bed631ab9547ad277fdbaeab1b0ac026e4 /test/openssl
parentab92baff34097fbb9e74815eab1b72185b250cc6 (diff)
downloadruby-openssl-8149cdf6e874214f9349f1f236b003d9239228f9.tar.gz
CI: Add the test/openssl/test_pkey.rb on the FIPS mode case.
It's to test the `OpenSSL::PKey.read` in the `test/openssl/test_pkey.rb`. I added the pending status to the following tests failing on the FIPS mode case in the `test/openssl/test_pkey.rb`. * `test_ed25519` * `test_x25519` * `test_compare?`
Diffstat (limited to 'test/openssl')
-rw-r--r--test/openssl/test_pkey.rb7
1 files changed, 7 insertions, 0 deletions
diff --git a/test/openssl/test_pkey.rb b/test/openssl/test_pkey.rb
index 2b99e8f3..2cd5290f 100644
--- a/test/openssl/test_pkey.rb
+++ b/test/openssl/test_pkey.rb
@@ -82,6 +82,9 @@ class OpenSSL::TestPKey < OpenSSL::PKeyTestCase
end
def test_ed25519
+ # https://github.com/openssl/openssl/issues/20758
+ pend('Not supported on FIPS mode enabled') if OpenSSL.fips_mode
+
# Test vector from RFC 8032 Section 7.1 TEST 2
priv_pem = <<~EOF
-----BEGIN PRIVATE KEY-----
@@ -127,6 +130,8 @@ class OpenSSL::TestPKey < OpenSSL::PKeyTestCase
end
def test_x25519
+ pend('Not supported on FIPS mode enabled') if OpenSSL.fips_mode
+
# Test vector from RFC 7748 Section 6.1
alice_pem = <<~EOF
-----BEGIN PRIVATE KEY-----
@@ -153,6 +158,8 @@ class OpenSSL::TestPKey < OpenSSL::PKeyTestCase
end
def test_compare?
+ pend('Not supported on FIPS mode enabled') if OpenSSL.fips_mode
+
key1 = Fixtures.pkey("rsa1024")
key2 = Fixtures.pkey("rsa1024")
key3 = Fixtures.pkey("rsa2048")