Merge pull request #786 from junaruga/wip/EVP_PKEY_paramgen-fips-dsa

test_s_generate_parameters: Consider a DSA error in FIPS.
ruby · Aug 16, 2024 · 3fc8972 · 3fc8972
2 parents a664af8 + 5ca6eb4
commit 3fc8972
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/test/openssl/test_pkey.rb b/test/openssl/test_pkey.rb
@@ -38,6 +38,12 @@ def test_s_generate_parameters
     assert_raise(OpenSSL::PKey::PKeyError) {
       OpenSSL::PKey.generate_parameters("EC", "invalid" => "option")
     }
+  end
+
+  def test_s_generate_parameters_with_block
+    # DSA kengen is not FIPS-approved.
+    # https://github.com/openssl/openssl/commit/49a35f0#diff-605396c063194975af8ce31399d42690ab18186b422fb5012101cc9132660fe1R611-R614
+    omit_on_fips
 
     # Parameter generation callback is called
     if openssl?(3, 0, 0, 0) && !openssl?(3, 0, 0, 6)