From: Evan Hunt <each@isc.org>
Date: Wed, 17 Jun 2026 02:01:27 +0000 (-0700)
Subject: add isctest.mark method for ecdsa_deterinistic
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=6e44151466864d3dd783a20da83d01028781d3e2;p=thirdparty%2Fbind9.git

add isctest.mark method for ecdsa_deterinistic

This checks support for ECDSA deterministic mode in the cryptography
library.
---

diff --git a/bin/tests/system/isctest/mark.py b/bin/tests/system/isctest/mark.py
index 07f0f4c10cd..ac3984a58ac 100644
--- a/bin/tests/system/isctest/mark.py
+++ b/bin/tests/system/isctest/mark.py
@@ -98,3 +98,15 @@ def have_ipv6():
 
 
 with_ipv6 = pytest.mark.skipif(not have_ipv6(), reason="IPv6 not available")
+
+ecdsa_deterministic = False
+try:
+    from cryptography.hazmat.backends import default_backend
+
+    ecdsa_deterministic = default_backend().ecdsa_deterministic_supported()
+except Exception:  # pylint: disable=broad-except
+    pass
+
+with_ecdsa_deterministic = pytest.mark.skipif(
+    not ecdsa_deterministic, reason="ECDSA deterministic signing is not supported"
+)