Skip to content

Commit

Permalink
tests: Skip escrow tests in FIPS mode
Browse files Browse the repository at this point in the history
There are some new stricter rules for FIPS in RHEL/CentOS 10 and
we are not able to generate a self-signed certificate for testing
that wouldn't be rejected by NSS. There might be a workaround for
this, but I wasn't able to find one.
  • Loading branch information
vojtechtrefny committed Jan 15, 2025
1 parent 2f5af57 commit 4366fa3
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions tests/crypto_test.py
Original file line number Diff line number Diff line change
Expand Up @@ -702,6 +702,12 @@ def test_luks2_open_rw(self):

class CryptoTestEscrow(CryptoTestCase):
def setUp(self):
# I am not able to generate a self-signed certificate that would work in FIPS
# so let's just skip this for now
fips = read_file("/proc/sys/crypto/fips_enabled")
if int(fips) == 1:
self.skipTest("Skipping escrow tests in FIPS mode")

super(CryptoTestEscrow, self).setUp()

# Create the certificate used to encrypt the escrow packet and backup passphrase.
Expand Down

0 comments on commit 4366fa3

Please sign in to comment.