On Wed, 7 Jun 2023 14:43:00 -0300 Magali Lemes wrote:
> FIXTURE(tls)
> {
> - int fd, cfd;
> + int fd, cfd, fips_enabled;
put bool fips_non_compliant into the variant, and mark down
the cases which need to be skipped. There is fewer variants
than tests
> bool notls;
> };
>
> @@ -309,7 +309,22 @@ FIXTURE_SETUP(tls)
> {
> struct tls_crypto_info_keys tls12;
> int one = 1;
> - int ret;
> + int ret, res;
> + FILE *f;
> +
> + self->fips_enabled = 0;
> + f = fopen("/proc/sys/crypto/fips_enabled", "r");
> + if (f) {
> + res = fscanf(f, "%d", &self->fips_enabled);
> + if (res != 1)
> + ksft_print_msg("ERROR: Couldn't read /proc/sys/crypto/fips_enabled\n");
> + fclose(f);
> + }
Cache the fips_enabled in a static global variable, no point reading
it every time.
--
pw-bot: cr
