]> git.ipfire.org Git - thirdparty/gnutls.git/commitdiff
tests: gnutls_hmac_fast: explicitly enable MD5 use under FIPS140-2 mode
authorNikos Mavrogiannopoulos <nmav@redhat.com>
Mon, 22 Jan 2018 10:40:42 +0000 (11:40 +0100)
committerNikos Mavrogiannopoulos <nmav@redhat.com>
Mon, 19 Feb 2018 07:39:36 +0000 (08:39 +0100)
Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
tests/gnutls_hmac_fast.c

index 1df48d338adbebbb84204ba500195d8adc0bc678..35d8ba165191792e7e2d6fe14982b99cabc8b228 100644 (file)
@@ -43,22 +43,6 @@ void doit(void)
        if (debug)
                gnutls_global_set_log_level(4711);
 
-       err =
-           gnutls_hmac_fast(GNUTLS_MAC_MD5, "keykeykey", 9, "abcdefgh", 8,
-                            digest);
-       if (err < 0)
-               fail("gnutls_hmac_fast(MD5) failed: %d\n", err);
-       else {
-               if (memcmp(digest, "\x3c\xb0\x9d\x83\x28\x01\xef\xc0"
-                          "\x7b\xb3\xaf\x42\x69\xe5\x93\x9a", 16) == 0) {
-                       if (debug)
-                               success("gnutls_hmac_fast(MD5) OK\n");
-               } else {
-                       hexprint(digest, 16);
-                       fail("gnutls_hmac_fast(MD5) failure\n");
-               }
-       }
-
        err =
            gnutls_hmac_fast(GNUTLS_MAC_SHA1, "keykeykey", 9, "abcdefgh",
                             8, digest);
@@ -76,5 +60,27 @@ void doit(void)
                }
        }
 
+       /* enable MD5 usage */
+       if (gnutls_fips140_mode_enabled()) {
+               gnutls_fips140_set_mode(GNUTLS_FIPS140_LOG);
+       }
+
+       err =
+           gnutls_hmac_fast(GNUTLS_MAC_MD5, "keykeykey", 9, "abcdefgh", 8,
+                            digest);
+       if (err < 0)
+               fail("gnutls_hmac_fast(MD5) failed: %d\n", err);
+       else {
+               if (memcmp(digest, "\x3c\xb0\x9d\x83\x28\x01\xef\xc0"
+                          "\x7b\xb3\xaf\x42\x69\xe5\x93\x9a", 16) == 0) {
+                       if (debug)
+                               success("gnutls_hmac_fast(MD5) OK\n");
+               } else {
+                       hexprint(digest, 16);
+                       fail("gnutls_hmac_fast(MD5) failure\n");
+               }
+       }
+
+
        gnutls_global_deinit();
 }