test: add FIPS provider version checks for 3.4 compatibility

Tests that are changed by #25020 mandate updates to older test suite data to
pass because the FIPS provider's behaviour changes in 3.4.

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/25133)

(cherry picked from commit 0793071efa)
This commit is contained in:
Pauli 2024-08-08 10:55:15 +10:00
parent 48e7b18efc
commit 462d296ce3
3 changed files with 6 additions and 0 deletions

View File

@ -270,6 +270,7 @@ Title = FIPS Tests (using different key sizes and digests)
# Test sign with a 2048 bit key with N == 160 is not allowed in fips mode
Availablein = fips
FIPSversion = <3.4.0
DigestSign = SHA256
Key = DSA-2048-160
Input = "Hello"
@ -324,6 +325,7 @@ Title = Fips Negative Tests (using different key sizes and digests)
# Test sign with a 1024 bit key is not allowed in fips mode
Availablein = fips
FIPSversion = <3.4.0
DigestSign = SHA256
Securitycheck = 1
Key = DSA-1024-FIPS186-2
@ -340,6 +342,7 @@ Result = DIGESTSIGNINIT_ERROR
# Test sign with a 3072 bit key with N == 224 is not allowed in fips mode
Availablein = fips
FIPSversion = <3.4.0
DigestSign = SHA256
Securitycheck = 1
Key = DSA-3072-224
@ -348,6 +351,7 @@ Result = DIGESTSIGNINIT_ERROR
# Test sign with a 4096 bit key is not allowed in fips mode
Availablein = fips
FIPSversion = <3.4.0
DigestSign = SHA256
Securitycheck = 1
Key = DSA-4096-256

View File

@ -216,6 +216,7 @@ Result = DIGESTSIGNINIT_ERROR
# Test that SHA1 is not allowed in fips mode for signing
Availablein = fips
FIPSversion = <3.4.0
Sign = P-256
Securitycheck = 1
Ctrl = digest:SHA1

View File

@ -1831,6 +1831,7 @@ Output = 80382819f51b197c42f9fc02a85198683d918059afc013ae155992442563dd289700829
# Signing with SHA1 is not allowed in fips mode
Availablein = fips
FIPSversion = <3.4.0
DigestSign = SHA1
Securitycheck = 1
Key = RSA-2048