[libvirt] [PATCH] tests: force FIPS testing mode with new enough GNU TLS versions

Daniel P. Berrange berrange at redhat.com
Thu Sep 4 09:52:25 UTC 2014


On Thu, Sep 04, 2014 at 11:44:18AM +0200, Giuseppe Scrivano wrote:
> Signed-off-by: Giuseppe Scrivano <gscrivan at redhat.com>
> ---
>  tests/virnettlscontexttest.c | 2 ++
>  tests/virnettlssessiontest.c | 2 ++
>  2 files changed, 4 insertions(+)
> 
> diff --git a/tests/virnettlscontexttest.c b/tests/virnettlscontexttest.c
> index 51a0369..a3e24a3 100644
> --- a/tests/virnettlscontexttest.c
> +++ b/tests/virnettlscontexttest.c
> @@ -113,6 +113,8 @@ mymain(void)
>  {
>      int ret = 0;
>  
> +    setenv("GNUTLS_FORCE_FIPS_MODE", "2", 1);
> +
>      testTLSInit(KEYFILE);
>  
>  # define DO_CTX_TEST(_isServer, _caCrt, _crt, _expectFail)              \
> diff --git a/tests/virnettlssessiontest.c b/tests/virnettlssessiontest.c
> index 1e2683c..3af948a 100644
> --- a/tests/virnettlssessiontest.c
> +++ b/tests/virnettlssessiontest.c
> @@ -240,6 +240,8 @@ mymain(void)
>  {
>      int ret = 0;
>  
> +    setenv("GNUTLS_FORCE_FIPS_MODE", "2", 1);
> +
>      testTLSInit(KEYFILE);
>  
>  # define DO_SESS_TEST(_caCrt, _serverCrt, _clientCrt, _expectServerFail, \

ACK

Regards,
Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|




More information about the libvir-list mailing list