[PATCH] tests: force FIPS testing mode with new enough GNU TLS versions

[Giuseppe Scrivano <gscrivan@xxxxxxxxxx>]

Signed-off-by: Giuseppe Scrivano <gscrivan@xxxxxxxxxx>
---
 tests/virnettlscontexttest.c | 2 ++
 tests/virnettlssessiontest.c | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/tests/virnettlscontexttest.c b/tests/virnettlscontexttest.c
index 51a0369..a3e24a3 100644
--- a/tests/virnettlscontexttest.c
+++ b/tests/virnettlscontexttest.c
@@ -113,6 +113,8 @@ mymain(void)
 {
     int ret = 0;
 
+    setenv("GNUTLS_FORCE_FIPS_MODE", "2", 1);
+
     testTLSInit(KEYFILE);
 
 # define DO_CTX_TEST(_isServer, _caCrt, _crt, _expectFail)              \
diff --git a/tests/virnettlssessiontest.c b/tests/virnettlssessiontest.c
index 1e2683c..3af948a 100644
--- a/tests/virnettlssessiontest.c
+++ b/tests/virnettlssessiontest.c
@@ -240,6 +240,8 @@ mymain(void)
 {
     int ret = 0;
 
+    setenv("GNUTLS_FORCE_FIPS_MODE", "2", 1);
+
     testTLSInit(KEYFILE);
 
 # define DO_SESS_TEST(_caCrt, _serverCrt, _clientCrt, _expectServerFail, \
-- 
1.9.3

--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list