]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
ci: disable algorithm support checking in softhsm
authorTom Krizek <tkrizek@isc.org>
Mon, 31 Oct 2022 11:18:07 +0000 (12:18 +0100)
committerTom Krizek <tkrizek@isc.org>
Thu, 22 Dec 2022 14:17:41 +0000 (15:17 +0100)
The algorithm support detection script doesn't seem to work when using
the SoftHSM module. For some reason, dnssec-keygen returns 'crypto
failure'. Since the tests themselves pass, this is likely to be some
bug/definiency in the test scripts that check algorithm support that get
confused by SoftHSM.

Since this issue only happens for the system:gcc:softhsm2.6 job in the
9.16 branch, use a workaround to not introduce this new feature for
this particular problematic job.

.gitlab-ci.yml
bin/tests/system/get_algorithms.py

index 4e70d9c9c0cf7e6bebab5b53e63ab3e663158f59..83e44674edf16a826e9419b72a92ec9c610df751 100644 (file)
@@ -1127,6 +1127,8 @@ gcc:softhsm2.6:
   <<: *build_job
 
 system:gcc:softhsm2.6:
+  variables:
+    DISABLE_ALGORITHM_SUPPORT_CHECKING: 1
   <<: *debian_bullseye_amd64_image
   <<: *system_test_job
   needs:
index 54296497586b547c6fcd7423b50e2b17cb21c4ea..f1b020bffca177fc84e4f15afe5a189a1d7db914 100755 (executable)
@@ -219,9 +219,11 @@ def algorithms_env(algs: AlgorithmSet) -> Dict[str, str]:
 
 
 def main():
+    disable_checking = int(os.getenv("DISABLE_ALGORITHM_SUPPORT_CHECKING", "0"))
     try:
         algs = ALGORITHM_SETS[ALGORITHM_SET]
-        algs = filter_supported(algs)
+        if not disable_checking:
+            algs = filter_supported(algs)
         algs = select_random(algs)
         algs_env = algorithms_env(algs)
     except Exception: