From: Jakub Kicinski Date: Fri, 16 Jun 2023 05:24:03 +0000 (-0700) Subject: Merge branch 'check-if-fips-mode-is-enabled-when-running-selftests' X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=d4e067287b41b9eba278533d32afda35b25fbdd5;p=users%2Fjedix%2Flinux-maple.git Merge branch 'check-if-fips-mode-is-enabled-when-running-selftests' Magali Lemes says: ==================== Check if FIPS mode is enabled when running selftests Some test cases from net/tls, net/fcnal-test and net/vrf-xfrm-tests that rely on cryptographic functions to work and use non-compliant FIPS algorithms fail in FIPS mode. In order to allow these tests to pass in a wider set of kernels, - for net/tls, skip the test variants that use the ChaCha20-Poly1305 and SM4 algorithms, when FIPS mode is enabled; - for net/fcnal-test, skip the MD5 tests, when FIPS mode is enabled; - for net/vrf-xfrm-tests, replace the algorithms that are not FIPS-compliant with compliant ones. v1: https://lore.kernel.org/netdev/20230607174302.19542-1-magali.lemes@canonical.com/ v2: https://lore.kernel.org/netdev/20230609164324.497813-1-magali.lemes@canonical.com/ v3: https://lore.kernel.org/netdev/20230612125107.73795-1-magali.lemes@canonical.com/ ==================== Link: https://lore.kernel.org/r/20230613123222.631897-1-magali.lemes@canonical.com Signed-off-by: Jakub Kicinski --- d4e067287b41b9eba278533d32afda35b25fbdd5