]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
04-test_encoder_decoder.t: Use algorithm that is non-fips also on 3.0.0
authorTomas Mraz <tomas@openssl.org>
Mon, 4 Sep 2023 19:39:30 +0000 (21:39 +0200)
committerTomas Mraz <tomas@openssl.org>
Tue, 5 Sep 2023 07:35:18 +0000 (09:35 +0200)
The test encrypted RSA key with DES3 which is still
allowed in the 3.0 fips provider.

Instead use the traditional key format that uses MD5
to create the password based key. MD5 is disallowed
in the 3.0 fips provider.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/21957)

test/recipes/04-test_encoder_decoder.t

index 817c95ee64a4edf21d2916f5a5f56a8b821bbc7b..56c7d6e714a2e1878fb88e8ff66a126386a1ee90 100644 (file)
@@ -50,10 +50,10 @@ unless ($no_fips) {
 
     my $no_des = disabled("des");
 SKIP: {
-    skip "DES disabled", 2 if disabled("des");
-    ok(run(app([ 'openssl', 'genrsa', '-des3', '-out', 'epki.pem',
-                 '-passout', 'pass:pass' ])),
-       "rsa encrypt using a non fips algorithm");
+    skip "MD5 disabled", 2 if disabled("md5");
+    ok(run(app([ 'openssl', 'genrsa', '-aes128', '-out', 'epki.pem',
+                 '-traditional', '-passout', 'pass:pass' ])),
+       "rsa encrypted using a non fips algorithm MD5 in pbe");
 
     my $conf2 = srctop_file("test", "default-and-fips.cnf");
     ok(run(test(['decoder_propq_test', '-config', $conf2,