From: Pauli <pauli@openssl.org>
Date: Tue, 27 Jul 2021 23:52:23 +0000 (+1000)
Subject: test: add a comment indication that a bad MAC is intentional
X-Git-Tag: openssl-3.0.0-beta2~5
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=96d6a4e4464c3dec9cdf2c6fb59d737c8cb1be49;p=thirdparty%2Fopenssl.git

test: add a comment indication that a bad MAC is intentional

This permits negative testing of FIPS module load failure.

Also changed the MAC to all zeros to make it even clearer.

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16168)
---

diff --git a/test/recipes/30-test_defltfips/fipsmodule.cnf b/test/recipes/30-test_defltfips/fipsmodule.cnf
index d359c78e079..14d26d8e56d 100644
--- a/test/recipes/30-test_defltfips/fipsmodule.cnf
+++ b/test/recipes/30-test_defltfips/fipsmodule.cnf
@@ -1,5 +1,7 @@
+#The MAC here is meant to be incorrect, do not modify it
+
 [fips_sect]
 activate = 1
 conditional-errors = 1
 security-checks = 1
-module-mac = B9:C9:E1:F5:B7:49:18:1B:BF:63:68:DF:1A:66:40:2E:04:2A:8F:E2:B1:D9:F7:7C:08:6F:80:A0:1D:47:F2:00
+module-mac = 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00