mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-04-06 20:20:50 +08:00
Code Issues Packages Projects Releases Wiki Activity

sslapitest.c: With fips skip tests depending on X25519 and X448

Browse Source 
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/24347)
This commit is contained in:
Tomas Mraz 2024-05-09 10:48:56 +02:00
parent d2af5e4c94
commit f6e4698085
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
test/sslapitest.c
View File

@ -4980,10 +4980,14 @@ static int test_key_exchange(int idx)
break;
# ifndef OPENSSL_NO_ECX
case 4:
if (is_fips)
return TEST_skip("X25519 might not be supported by fips provider.");
kexch_alg = NID_X25519;
kexch_name0 = "x25519";
break;
case 5:
if (is_fips)
return TEST_skip("X448 might not be supported by fips provider.");
kexch_alg = NID_X448;
kexch_name0 = "x448";
break;
@ -5202,6 +5206,9 @@ static int test_negotiated_group(int idx)
else
expectednid = kexch_alg;
if (is_fips && (kexch_alg == NID_X25519 || kexch_alg == NID_X448))
return TEST_skip("X25519 and X448 might not be available in fips provider.");
if (!istls13)
max_version = TLS1_2_VERSION;