diff options
| author | Jun Aruga <jaruga@redhat.com> | 2024-08-16 12:01:26 +0200 |
|---|---|---|
| committer | git <svn-admin@ruby-lang.org> | 2024-08-16 17:10:23 +0000 |
| commit | 1917c8c8f333c2c39b575f47a17e74f4024f6051 (patch) | |
| tree | 8d8bf86fe11d7f1ce7302491acd884cdaa6b6390 /test/ruby/test_string_memory.rb | |
| parent | bbbe07a5dbe9fd747a62c202cfa5d4f2f3cbe52c (diff) | |
[ruby/openssl] Remove test_ed25519_not_approved_on_fips.
This commit fixes the following failure on OpenSSL master FIPS case.
```
1) Failure: test_ed25519_not_approved_on_fips(OpenSSL::TestPKey): OpenSSL::PKey::PKeyError expected but nothing was raised.
/home/runner/work/openssl/openssl/vendor/bundle/ruby/3.0.0/gems/test-unit-ruby-core-1.0.6/lib/core_assertions.rb:462:in `assert_raise'
/home/runner/work/openssl/openssl/test/openssl/test_pkey.rb:174:in `test_ed25519_not_approved_on_fips'
171: MC4CAQAwBQYDK2VwBCIEIEzNCJso/5banbbDRuwRTg9bijGfNaumJNqM9u1PuKb7
172: -----END PRIVATE KEY-----
173: EOF
=> 174: assert_raise(OpenSSL::PKey::PKeyError) do
175: OpenSSL::PKey.read(priv_pem)
176: end
177: end
```
Because FIPS compliance is a continually moving target. According to the [1],
FIPS 140-3 *currently* allows ED25519. The ED25519 is allowed again with the
latest OpenSSL FIPS by the commit [2], while it is not allowed in OpenSSL stable
version 3.x FIPS.
Remove this test because we want to keep our tests stable.
[1] https://github.com/openssl/openssl/discussions/22054
[2] https://github.com/openssl/openssl/commit/5f04124aab4a477d4e58149d8f04871ff7e5ea4b
https://github.com/ruby/openssl/commit/d43904b834
Diffstat (limited to 'test/ruby/test_string_memory.rb')
0 files changed, 0 insertions, 0 deletions
