You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In handshake_server_test.go the "RSA" and "RSA with ec_point_format" subtests of TestTLSPointFormats are skipped when fips140tls.Requried() is enabled, otherwise a handshake failure error is observed. This should be debugged (I suspect I'm overlooking someting small) and the subtests re-enabled for FIPS TLS mode.
The TestRenegotiationExtension test is skipped when fips140tls.Required() is enabled due to its use of RC4 ciphersuites and the RSA 1024 test certificate hiearchy. This should be possible to enable in FIPS TLS mode by replacing RC4 with an AES ciphersuite and using RSA 2048 test certs. Doing so was giving a "Server returned short message of length 7" error. This should be debugged and the test re-enabled for FIPS TLS mode.
The text was updated successfully, but these errors were encountered:
(Emoji vote if this was helpful or unhelpful; more detailed feedback welcome in this discussion.)
seankhliao
changed the title
Re-enable two TLS tests with fips140tls.Required
crypto/tls: re-enable two TLS tests with fips140tls.Required
Nov 21, 2024
Two small TODOs that came out of CR 629736:
In
handshake_server_test.go
the "RSA" and "RSA with ec_point_format" subtests ofTestTLSPointFormats
are skipped whenfips140tls.Requried()
is enabled, otherwise a handshake failure error is observed. This should be debugged (I suspect I'm overlooking someting small) and the subtests re-enabled for FIPS TLS mode.The
TestRenegotiationExtension
test is skipped whenfips140tls.Required()
is enabled due to its use of RC4 ciphersuites and the RSA 1024 test certificate hiearchy. This should be possible to enable in FIPS TLS mode by replacing RC4 with an AES ciphersuite and using RSA 2048 test certs. Doing so was giving a "Server returned short message of length 7" error. This should be debugged and the test re-enabled for FIPS TLS mode.The text was updated successfully, but these errors were encountered: