From 153dccd6561c792ec2dd12c9c30472e371c776e7459b1435c448cf98d81ee3ca Mon Sep 17 00:00:00 2001 From: Otto Hollmann Date: Wed, 7 Feb 2024 15:55:49 +0000 Subject: [PATCH] Accepting request 1144956 from home:pmonrealgonzalez:branches:security:tls - Enable running the regression tests in FIPS mode. OBS-URL: https://build.opensuse.org/request/show/1144956 OBS-URL: https://build.opensuse.org/package/show/security:tls/openssl-1_1?expand=0&rev=157 --- openssl-1_1.changes | 5 +++++ openssl-1_1.spec | 36 ++++++++++++++++++------------------ 2 files changed, 23 insertions(+), 18 deletions(-) diff --git a/openssl-1_1.changes b/openssl-1_1.changes index 9d62232..b2d18da 100644 --- a/openssl-1_1.changes +++ b/openssl-1_1.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Wed Feb 7 14:48:11 UTC 2024 - Pedro Monreal + +- Enable running the regression tests in FIPS mode. + ------------------------------------------------------------------- Mon Feb 5 16:29:26 UTC 2024 - Otto Hollmann diff --git a/openssl-1_1.spec b/openssl-1_1.spec index 2ab9594..2c78148 100644 --- a/openssl-1_1.spec +++ b/openssl-1_1.spec @@ -322,24 +322,24 @@ export MALLOC_PERTURB_=$(($RANDOM % 255 + 1)) LD_LIBRARY_PATH=`pwd` make test -j1 # Create the hmac files required to run the regression tests in FIPS mode -#%{buildroot}%{_bindir}/fips_standalone_hmac \ -# libssl.so.%{maj_min} > .libssl.so.%{maj_min}.hmac -#%{buildroot}%{_bindir}/fips_standalone_hmac \ -# libcrypto.so.%{maj_min} > .libcrypto.so.%{maj_min}.hmac -#OPENSSL_FORCE_FIPS_MODE=1 LD_LIBRARY_PATH=`pwd` make TESTS='-test_pem \ -# -test_hmac -test_mdc2 -test_dh -test_dsa -test_genrsa \ -# -test_mp_rsa -test_enc -test_enc_more -test_passwd -test_req \ -# -test_verify -test_evp -test_evp_extra -test_pkey_meth_kdf \ -# -test_bad_dtls -test_comp -test_key_share -test_renegotiation \ -# -test_sslcbcpadding -test_sslcertstatus -test_sslextension \ -# -test_sslmessages -test_sslrecords -test_sslsessiontick \ -# -test_sslsigalgs -test_sslsignature -test_sslskewith0p \ -# -test_sslversions -test_sslvertol -test_tls13alerts \ -# -test_tls13cookie -test_tls13downgrade -test_tls13hrr \ -# -test_tls13kexmodes -test_tls13messages -test_tls13psk \ -# -test_tlsextms -test_ca -test_cipherlist -test_cms \ -# -test_dtls_mtu -test_ssl_new -test_ssl_old -test_bio_enc \ -# -test_sslapi -test_tls13ccs -test_ec' test -j1 +LD_LIBRARY_PATH=`pwd` %{buildroot}%{_bindir}/fips_standalone_hmac \ + libssl.so.%{maj_min} > .libssl.so.%{maj_min}.hmac +LD_LIBRARY_PATH=`pwd` %{buildroot}%{_bindir}/fips_standalone_hmac \ + libcrypto.so.%{maj_min} > .libcrypto.so.%{maj_min}.hmac +OPENSSL_FORCE_FIPS_MODE=1 LD_LIBRARY_PATH=`pwd` make TESTS='-test_pem \ + -test_hmac -test_mdc2 -test_dh -test_dsa -test_genrsa \ + -test_mp_rsa -test_enc -test_enc_more -test_passwd -test_req \ + -test_verify -test_evp -test_evp_extra -test_pkey_meth_kdf \ + -test_bad_dtls -test_comp -test_key_share -test_renegotiation \ + -test_sslcbcpadding -test_sslcertstatus -test_sslextension \ + -test_sslmessages -test_sslrecords -test_sslsessiontick \ + -test_sslsigalgs -test_sslsignature -test_sslskewith0p \ + -test_sslversions -test_sslvertol -test_tls13alerts \ + -test_tls13cookie -test_tls13downgrade -test_tls13hrr \ + -test_tls13kexmodes -test_tls13messages -test_tls13psk \ + -test_tlsextms -test_ca -test_cipherlist -test_cms \ + -test_dtls_mtu -test_ssl_new -test_ssl_old -test_bio_enc \ + -test_sslapi -test_tls13ccs -test_ec' test -j1 # show ciphers gcc -o showciphers %{optflags} -I%{buildroot}%{_includedir} %{SOURCE5} -L%{buildroot}%{_libdir} -lssl -lcrypto