]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
tsiggss: skip test in FIPS mode when DH is broken
authorMark Andrews <marka@isc.org>
Thu, 23 Dec 2021 05:12:28 +0000 (16:12 +1100)
committerMark Andrews <marka@isc.org>
Mon, 3 Apr 2023 02:44:27 +0000 (12:44 +1000)
'tsiggss' depends on a working DH implementation.  This is not
properly supported in all FIPS implementations.

bin/tests/system/tsiggss/prereq.sh

index 0f8e2d6110d43d51f46e4f9f8f301a34f9cd2517..252b624cab3c85c2576b15594dea13209d22acc2 100644 (file)
@@ -19,4 +19,9 @@ $FEATURETEST --gssapi ||  {
         exit 255
 }
 
+$FEATURETEST --have-fips-dh ||  {
+        echo_i "FIPS mode Diffie-Hellman not working - skipping tsiggss test"
+        exit 255
+}
+
 exit 0