tests: skip pkcs12-gost under GNUTLS_FORCE_FIPS_MODE

The MAC algorithm used in the PBKDF2 is actually prohibited in the
FIPS mode and previously there wasn't a check for that.

Signed-off-by: Daiki Ueno <dueno@redhat.com>

diff --git a/tests/cert-tests/pkcs12-gost b/tests/cert-tests/pkcs12-gost
index 2b5b6bfd7987e9d689694dd180502001f75bf3df..f7c4bba52b04a0285db9fe75397cf4ee42a505bf 100755 (executable)
--- a/tests/cert-tests/pkcs12-gost
+++ b/tests/cert-tests/pkcs12-gost
@@ -29,6 +29,11 @@ if ! test -x "${CERTTOOL}"; then
        exit 77
 fi
 
+if test "${GNUTLS_FORCE_FIPS_MODE}" = 1;then
+       echo "Cannot run in FIPS140-2 mode"
+       exit 77
+fi
+
 if ! test -z "${VALGRIND}"; then
        VALGRIND="${LIBTOOL:-libtool} --mode=execute ${VALGRIND} --error-exitcode=1"
 fi