Skip to content

Commit 9dcc45e

Browse files
Shigeki Ohtsurvagg
Shigeki Ohtsu
authored andcommitted
test: enable to work pkcs12 test in FIPS mode
The pfx file created by pkcs12 command of openssl causes an error in FIPS mode because its certificate is encrypted with RC2 by default. Adding `-descert` option resolves the error. Fix: #5144 Fix: #5109 PR-URL: #5150 Reviewed-By: Rich Trott <[email protected]>
1 parent e439066 commit 9dcc45e

File tree

3 files changed

+1
-5
lines changed

3 files changed

+1
-5
lines changed

test/fixtures/keys/Makefile

+1
Original file line numberDiff line numberDiff line change
@@ -81,6 +81,7 @@ agent1-cert.pem: agent1-csr.pem ca1-cert.pem ca1-key.pem
8181

8282
agent1-pfx.pem: agent1-cert.pem agent1-key.pem ca1-cert.pem
8383
openssl pkcs12 -export \
84+
-descert \
8485
-in agent1-cert.pem \
8586
-inkey agent1-key.pem \
8687
-certfile ca1-cert.pem \

test/fixtures/keys/agent1-pfx.pem

0 Bytes
Binary file not shown.

test/parallel/test-tls-pfx-gh-5100-regr.js

-5
Original file line numberDiff line numberDiff line change
@@ -7,11 +7,6 @@ if (!common.hasCrypto) {
77
return;
88
}
99

10-
if (common.hasFipsCrypto) {
11-
console.log('1..0 # Skipped: PFX does not work in FIPS mode');
12-
return;
13-
}
14-
1510
const assert = require('assert');
1611
const tls = require('tls');
1712
const fs = require('fs');

0 commit comments

Comments
 (0)