As DSA is not-approved in FIPS 140-3, there is no need to run a self test on it.

Signed-off-by: Angel Yankov <angel.yankov@suse.com>

diff --git a/lib/fips.c b/lib/fips.c
index dc86a4435486214985838f230324e645653964b2..4f61fc2431ad59f8851f843b085ad59118a8ccec 100644 (file)
--- a/lib/fips.c
+++ b/lib/fips.c
@@ -629,11 +629,6 @@ int _gnutls_fips_perform_self_checks2(void)
                }
        }
 
-       ret = gnutls_pk_self_test(0, GNUTLS_PK_DSA);
-       if (ret < 0) {
-               return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);
-       }
-
        ret = gnutls_pk_self_test(0, GNUTLS_PK_EC);
        if (ret < 0) {
                return gnutls_assert_val(GNUTLS_E_SELF_TEST_ERROR);