]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
add isctest.mark method for ecdsa_deterinistic
authorEvan Hunt <each@isc.org>
Wed, 17 Jun 2026 02:01:27 +0000 (19:01 -0700)
committerEvan Hunt <each@isc.org>
Wed, 17 Jun 2026 02:07:06 +0000 (19:07 -0700)
This checks support for ECDSA deterministic mode in the cryptography
library.

bin/tests/system/isctest/mark.py

index 07f0f4c10cd55dd80761ba27c71fa36a093f11a7..ac3984a58ac0ff7e4ee0b5395a4c11744356270b 100644 (file)
@@ -98,3 +98,15 @@ def have_ipv6():
 
 
 with_ipv6 = pytest.mark.skipif(not have_ipv6(), reason="IPv6 not available")
+
+ecdsa_deterministic = False
+try:
+    from cryptography.hazmat.backends import default_backend
+
+    ecdsa_deterministic = default_backend().ecdsa_deterministic_supported()
+except Exception:  # pylint: disable=broad-except
+    pass
+
+with_ecdsa_deterministic = pytest.mark.skipif(
+    not ecdsa_deterministic, reason="ECDSA deterministic signing is not supported"
+)