Skip DES based tests in FIPS mode

Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from #19486)
openssl · Nov 1, 2022 · 3e218fd · 3e218fd
1 parent e30aad5
commit 3e218fd
Showing 1 changed file with 10 additions and 7 deletions.
diff --git a/test/recipes/80-test_cms.t b/test/recipes/80-test_cms.t
@@ -370,28 +370,31 @@ my @smime_cms_tests = (
       \&final_compare
     ],
 
-    [ "encrypted content test streaming PEM format, triple DES key",
+    [ "encrypted content test streaming PEM format, 128 bit AES key",
       [ "{cmd1}", @prov, "-EncryptedData_encrypt", "-in", $smcont, "-outform", "PEM",
-        "-des3", "-secretkey", "000102030405060708090A0B0C0D0E0F1011121314151617",
+        "-aes128", "-secretkey", "000102030405060708090A0B0C0D0E0F",
         "-stream", "-out", "{output}.cms" ],
       [ "{cmd2}", @prov, "-EncryptedData_decrypt", "-in", "{output}.cms",
         "-inform", "PEM",
-        "-secretkey", "000102030405060708090A0B0C0D0E0F1011121314151617",
+        "-secretkey", "000102030405060708090A0B0C0D0E0F",
         "-out", "{output}.txt" ],
       \&final_compare
     ],
+);
 
-    [ "encrypted content test streaming PEM format, 128 bit AES key",
+# FIPS 140-3: DES is unavailable
+push @smime_cms_tests, (
+    [ "encrypted content test streaming PEM format, triple DES key",
       [ "{cmd1}", @prov, "-EncryptedData_encrypt", "-in", $smcont, "-outform", "PEM",
-        "-aes128", "-secretkey", "000102030405060708090A0B0C0D0E0F",
+        "-des3", "-secretkey", "000102030405060708090A0B0C0D0E0F1011121314151617",
         "-stream", "-out", "{output}.cms" ],
       [ "{cmd2}", @prov, "-EncryptedData_decrypt", "-in", "{output}.cms",
         "-inform", "PEM",
-        "-secretkey", "000102030405060708090A0B0C0D0E0F",
+        "-secretkey", "000102030405060708090A0B0C0D0E0F1011121314151617",
         "-out", "{output}.txt" ],
       \&final_compare
     ],
-);
+) if $no_fips;
 
 my @smime_cms_cades_tests = (