Skip to content

Commit

Permalink
sslapitest.c: With fips skip tests depending on X25519 and X448
Browse files Browse the repository at this point in the history
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from #24347)

(cherry picked from commit f6e4698)
  • Loading branch information
t8m committed May 14, 2024
1 parent 4fd2fa3 commit 4471636
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions test/sslapitest.c
Original file line number Diff line number Diff line change
Expand Up @@ -4950,10 +4950,14 @@ static int test_key_exchange(int idx)
break;
# ifndef OPENSSL_NO_ECX
case 4:
if (is_fips)
return TEST_skip("X25519 might not be supported by fips provider.");
kexch_alg = NID_X25519;
kexch_name0 = "x25519";
break;
case 5:
if (is_fips)
return TEST_skip("X448 might not be supported by fips provider.");
kexch_alg = NID_X448;
kexch_name0 = "x448";
break;
Expand Down Expand Up @@ -5172,6 +5176,9 @@ static int test_negotiated_group(int idx)
else
expectednid = kexch_alg;

if (is_fips && (kexch_alg == NID_X25519 || kexch_alg == NID_X448))
return TEST_skip("X25519 and X448 might not be available in fips provider.");

if (!istls13)
max_version = TLS1_2_VERSION;

Expand Down

0 comments on commit 4471636

Please sign in to comment.