From: Mark Andrews <marka@isc.org>
Date: Thu, 23 Dec 2021 05:12:28 +0000 (+1100)
Subject: tsiggss: skip test in FIPS mode when DH is broken
X-Git-Tag: v9.19.12~38^2~14
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c3ba38f89f0999ed8843c3ab63b704b5cf0c5bcb;p=thirdparty%2Fbind9.git

tsiggss: skip test in FIPS mode when DH is broken

'tsiggss' depends on a working DH implementation.  This is not
properly supported in all FIPS implementations.
---

diff --git a/bin/tests/system/tsiggss/prereq.sh b/bin/tests/system/tsiggss/prereq.sh
index 0f8e2d6110d..252b624cab3 100644
--- a/bin/tests/system/tsiggss/prereq.sh
+++ b/bin/tests/system/tsiggss/prereq.sh
@@ -19,4 +19,9 @@ $FEATURETEST --gssapi ||  {
         exit 255
 }
 
+$FEATURETEST --have-fips-dh ||  {
+        echo_i "FIPS mode Diffie-Hellman not working - skipping tsiggss test"
+        exit 255
+}
+
 exit 0