[libvirt] [PATCH] tests: force FIPS testing mode with new enough GNU TLS versions
Daniel P. Berrange
berrange at redhat.com
Thu Sep 4 09:52:25 UTC 2014
On Thu, Sep 04, 2014 at 11:44:18AM +0200, Giuseppe Scrivano wrote:
> Signed-off-by: Giuseppe Scrivano <gscrivan at redhat.com>
> ---
> tests/virnettlscontexttest.c | 2 ++
> tests/virnettlssessiontest.c | 2 ++
> 2 files changed, 4 insertions(+)
>
> diff --git a/tests/virnettlscontexttest.c b/tests/virnettlscontexttest.c
> index 51a0369..a3e24a3 100644
> --- a/tests/virnettlscontexttest.c
> +++ b/tests/virnettlscontexttest.c
> @@ -113,6 +113,8 @@ mymain(void)
> {
> int ret = 0;
>
> + setenv("GNUTLS_FORCE_FIPS_MODE", "2", 1);
> +
> testTLSInit(KEYFILE);
>
> # define DO_CTX_TEST(_isServer, _caCrt, _crt, _expectFail) \
> diff --git a/tests/virnettlssessiontest.c b/tests/virnettlssessiontest.c
> index 1e2683c..3af948a 100644
> --- a/tests/virnettlssessiontest.c
> +++ b/tests/virnettlssessiontest.c
> @@ -240,6 +240,8 @@ mymain(void)
> {
> int ret = 0;
>
> + setenv("GNUTLS_FORCE_FIPS_MODE", "2", 1);
> +
> testTLSInit(KEYFILE);
>
> # define DO_SESS_TEST(_caCrt, _serverCrt, _clientCrt, _expectServerFail, \
ACK
Regards,
Daniel
--
|: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org -o- http://virt-manager.org :|
|: http://autobuild.org -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|
More information about the libvir-list
mailing list