mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-02-17 14:32:04 +08:00
Code Issues Packages Projects Releases Wiki Activity

test: test -drbg_allow_truncated_digests option

Browse Source 
Verify that the option produces the correct output in the FIPS configuration
file and that the default is as expected.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/20521)
This commit is contained in:
Pauli 2023-03-20 10:49:40 +11:00
parent b345dbed28
commit 78bcbc1ea4
1 changed files with 30 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
test/recipes/03-test_fipsinstall.t
View File

@ -24,7 +24,7 @@ use platform;
plan skip_all => "Test only supported in a fips build" if disabled("fips");
plan tests => 31;
plan tests => 34;
my $infile = bldtop_file('providers', platform->dso('fips'));
my $fipskey = $ENV{FIPSKEY} // config('FIPSKEY') // '00';
@ -80,6 +80,22 @@ sub replace_parent_line_file {
$srch, $rep, $outfile);
}
# Check if the specified pattern occurs in the given file
# Returns 1 if the pattern is found and 0 if not
sub find_line_file {
my ($key, $file) = @_;
open(my $in, $file) or return -1;
while (my $line = <$in>) {
if ($line =~ /$key/) {
close($in);
return 1;
}
}
close($in);
return 0;
}
# fail if no module name
ok(!run(app(['openssl', 'fipsinstall', '-out', 'fips.cnf', '-module',
'-provider_name', 'fips',
@ -351,3 +367,16 @@ SKIP: {
'-ems_check'])),
"fipsinstall fails when attempting to run self tests on install");
}
ok(find_line_file('drbg-no-trunc-md = 0', 'fips.cnf') == 1,
'fipsinstall defaults to not banning truncated digests with DRBGs');
ok(run(app(['openssl', 'fipsinstall', '-out', 'fips.cnf', '-module', $infile,
'-provider_name', 'fips', '-mac_name', 'HMAC',
'-macopt', 'digest:SHA256', '-macopt', "hexkey:$fipskey",
'-section_name', 'fips_sect', '-no_drbg_truncated_digests'])),
"fipsinstall knows about allowing truncated digests in DRBGs");
ok(find_line_file('drbg-no-trunc-md = 1', 'fips.cnf') == 1,
'fipsinstall will allow option for truncated digests with DRBGs');