sslapitest.c: With fips skip tests depending on X25519 and X448

Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Tom Cosgrove <[email protected]> (Merged from #24347) (cherry picked from commit f6e4698)
openssl · May 14, 2024 · 2ae3b0b · 2ae3b0b
1 parent fb3b7f9
commit 2ae3b0b
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/test/sslapitest.c b/test/sslapitest.c
@@ -4914,10 +4914,14 @@ static int test_key_exchange(int idx)
  kexch_name0 = "secp521r1";
  break;
  case 4:
+ if (is_fips)
+ return TEST_skip("X25519 might not be supported by fips provider.");
  kexch_alg = NID_X25519;
  kexch_name0 = "x25519";
  break;
  case 5:
+ if (is_fips)
+ return TEST_skip("X448 might not be supported by fips provider.");
  kexch_alg = NID_X448;
  kexch_name0 = "x448";
  break;
@@ -5132,6 +5136,9 @@ static int test_negotiated_group(int idx)
  else
  expectednid = kexch_alg;
 
+ if (is_fips && (kexch_alg == NID_X25519 || kexch_alg == NID_X448))
+ return TEST_skip("X25519 and X448 might not be available in fips provider.");
+
  if (!istls13)
  max_version = TLS1_2_VERSION;