1berry/ruby
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[ruby/openssl] Fix test_provider.rb in FIPS.

Browse Source 
https://github.com/ruby/openssl/commit/7bdbc52100
This commit is contained in:
Jun Aruga 2024-09-05 20:06:37 +02:00 committed by git
parent 30176e3f23
commit ad742de79b
1 changed files with 18 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
test/openssl/test_provider.rb
View File

@ -1,6 +1,6 @@
# frozen_string_literal: true # frozen_string_literal: true
require_relative 'utils' require_relative 'utils'
if defined?(OpenSSL) && defined?(OpenSSL::Provider) && !OpenSSL.fips_mode if defined?(OpenSSL) && defined?(OpenSSL::Provider)
class OpenSSL::TestProvider < OpenSSL::TestCase class OpenSSL::TestProvider < OpenSSL::TestCase
def test_openssl_provider_name_inspect def test_openssl_provider_name_inspect
@ -12,14 +12,22 @@ class OpenSSL::TestProvider < OpenSSL::TestCase
end end
def test_openssl_provider_names def test_openssl_provider_names
# We expect the following providers are loaded in the cases:
# * Non-FIPS: default
# * FIPS: fips, base
# Use the null provider to test the added provider.
# See provider(7) - OPENSSL PROVIDERS to see the list of providers, and
# OSSL_PROVIDER-null(7) to check the details of the null provider.
with_openssl <<-'end;' with_openssl <<-'end;'
base_provider = OpenSSL::Provider.load("base") num = OpenSSL::Provider.provider_names.size
assert_equal(2, OpenSSL::Provider.provider_names.size)
assert_includes(OpenSSL::Provider.provider_names, "base")
assert_equal(true, base_provider.unload) added_provider = OpenSSL::Provider.load("null")
assert_equal(1, OpenSSL::Provider.provider_names.size) assert_equal(num + 1, OpenSSL::Provider.provider_names.size)
assert_not_includes(OpenSSL::Provider.provider_names, "base") assert_includes(OpenSSL::Provider.provider_names, "null")
assert_equal(true, added_provider.unload)
assert_equal(num, OpenSSL::Provider.provider_names.size)
assert_not_includes(OpenSSL::Provider.provider_names, "null")
end; end;
end end
@ -33,6 +41,9 @@ class OpenSSL::TestProvider < OpenSSL::TestCase
end end
def test_openssl_legacy_provider def test_openssl_legacy_provider
# The legacy provider is not supported on FIPS.
omit_on_fips
with_openssl(<<-'end;') with_openssl(<<-'end;')
begin begin
OpenSSL::Provider.load("legacy") OpenSSL::Provider.load("legacy")