From 366d8005b100d83a711234b2aa6176810bad2525 Mon Sep 17 00:00:00 2001 From: Jun Aruga Date: Mon, 17 Apr 2023 19:05:48 +0200 Subject: [PATCH] [ruby/openssl] CI: Add the test/openssl/test_pkey.rb on the FIPS mode case. It's to test the `OpenSSL::PKey.read` in the `test/openssl/test_pkey.rb`. I added the pending status to the following tests failing on the FIPS mode case in the `test/openssl/test_pkey.rb`. * `test_ed25519` * `test_x25519` * `test_compare?` https://github.com/ruby/openssl/commit/8149cdf6e8 --- test/openssl/test_pkey.rb | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/test/openssl/test_pkey.rb b/test/openssl/test_pkey.rb index 2b99e8f3748233..2cd5290f49e515 100644 --- a/test/openssl/test_pkey.rb +++ b/test/openssl/test_pkey.rb @@ -82,6 +82,9 @@ def test_hmac_sign_verify end def test_ed25519 + # https://github.com/openssl/openssl/issues/20758 + pend('Not supported on FIPS mode enabled') if OpenSSL.fips_mode + # Test vector from RFC 8032 Section 7.1 TEST 2 priv_pem = <<~EOF -----BEGIN PRIVATE KEY----- @@ -127,6 +130,8 @@ def test_ed25519 end def test_x25519 + pend('Not supported on FIPS mode enabled') if OpenSSL.fips_mode + # Test vector from RFC 7748 Section 6.1 alice_pem = <<~EOF -----BEGIN PRIVATE KEY----- @@ -153,6 +158,8 @@ def test_x25519 end def test_compare? + pend('Not supported on FIPS mode enabled') if OpenSSL.fips_mode + key1 = Fixtures.pkey("rsa1024") key2 = Fixtures.pkey("rsa1024") key3 = Fixtures.pkey("rsa2048")