mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-11-27 05:21:51 +08:00
Code Issues Packages Projects Releases Wiki Activity

ECDSA with SHA3 verification does not depend on FIPS provider version

Browse Source 
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22322)
This commit is contained in:
Tomas Mraz 2023-10-09 17:32:53 +02:00
parent 2989041548
commit d0bf0106a5
1 changed files with 13 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
test/recipes/25-test_verify.t
View File

@ -369,6 +369,19 @@ SKIP: {
skip "EC is not supported or FIPS is disabled", 7
if disabled("ec") || $no_fips;
$ENV{OPENSSL_CONF} = $provconf;
ok(verify("ee-cert-ec-sha3-224", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
"accept cert generated with EC and SHA3-224 w/fips");
ok(verify("ee-cert-ec-sha3-256", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
"accept cert generated with EC and SHA3-256 w/fips");
ok(verify("ee-cert-ec-sha3-384", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
"accept cert generated with EC and SHA3-384 w/fips");
ok(verify("ee-cert-ec-sha3-512", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
"accept cert generated with EC and SHA3-512 w/fips");
delete $ENV{OPENSSL_CONF};
run(test(["fips_version_test", "-config", $provconf, ">3.0.0"]),
capture => 1, statusvar => \my $exit);
skip "FIPS provider version is too old", 3
@ -385,15 +398,6 @@ SKIP: {
ok(verify("ee-cert-ec-named-named", "", ["root-cert"],
["ca-cert-ec-named"], @prov),
"accept named curve leaf with named curve intermediate w/fips");
ok(verify("ee-cert-ec-sha3-224", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
"accept cert generated with EC and SHA3-224 w/fips");
ok(verify("ee-cert-ec-sha3-256", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
"accept cert generated with EC and SHA3-256 w/fips");
ok(verify("ee-cert-ec-sha3-384", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
"accept cert generated with EC and SHA3-384 w/fips");
ok(verify("ee-cert-ec-sha3-512", "", ["root-cert"], ["ca-cert-ec-named"], @prov),
"accept cert generated with EC and SHA3-512 w/fips");
delete $ENV{OPENSSL_CONF};
}