Skip to content

Commit 13d1a89

Browse files
committed
Use ENV["TEST_RUBY_OPENSSL_FIPS_ENABLED"] instead of OpenSSL::OPENSSL_FIPS.
As OpenSSL::OPENSSL_FIPS always returns true on OpenSSL >= 3.0.0, we cannot use this constant as a flag to check whether the OpenSSL is FIPS or not. See <https://github.com/ruby/openssl/blob/d725783c5c180337f3d00efcba5b8744e0aea813/ext/openssl/ossl.c#L994-L1004>.
1 parent 0cebb0e commit 13d1a89

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

test/openssl/test_fips.rb

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,9 @@ def test_fips_mode_is_reentrant
3737
end
3838

3939
def test_fips_mode_get_with_fips_mode_set
40-
omit('OpenSSL is not FIPS-capable') unless OpenSSL::OPENSSL_FIPS
40+
unless ENV["TEST_RUBY_OPENSSL_FIPS_ENABLED"]
41+
omit "Only for FIPS mode environment"
42+
end
4143
pend "AWS-LC's FIPS mode is decided at compile time" if aws_lc?
4244

4345
assert_separately(["-ropenssl"], <<~"end;")

0 commit comments

Comments
 (0)