1berry/ruby
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[ruby/openssl] test_fips.rb: account for AWS-LC's FIPS mode

Browse Source 
AWS-LC's FIPS mode is decided at compile time. FIPS in AWS-LC can't be
toggled on and off like OpenSSL, so tests that attempt to do so are
incompatible.

https://github.com/ruby/openssl/commit/027de6732d
This commit is contained in:
Samuel Chiang 2025-02-12 00:45:40 +00:00 committed by git
parent d6f44535c6
commit 6f3bd3769b
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
test/openssl/test_fips.rb
View File

@ -28,6 +28,8 @@ class OpenSSL::TestFIPS < OpenSSL::TestCase
end end
def test_fips_mode_is_reentrant def test_fips_mode_is_reentrant
return if aws_lc? # AWS-LC's FIPS mode is decided at compile time.
assert_separately(["-ropenssl"], <<~"end;") assert_separately(["-ropenssl"], <<~"end;")
OpenSSL.fips_mode = false OpenSSL.fips_mode = false
OpenSSL.fips_mode = false OpenSSL.fips_mode = false
@ -35,7 +37,7 @@ class OpenSSL::TestFIPS < OpenSSL::TestCase
end end
def test_fips_mode_get_with_fips_mode_set def test_fips_mode_get_with_fips_mode_set
omit('OpenSSL is not FIPS-capable') unless OpenSSL::OPENSSL_FIPS omit('OpenSSL is not FIPS-capable') unless OpenSSL::OPENSSL_FIPS and !aws_lc? # AWS-LC's FIPS mode is decided at compile time.
assert_separately(["-ropenssl"], <<~"end;") assert_separately(["-ropenssl"], <<~"end;")
begin begin