Merge pull request #1085 from vojtechtrefny/master_fips-escrow-skip

tests: Skip escrow tests in FIPS mode

Author: vojtechtrefny

tests/crypto_test.py

@@ -702,6 +702,12 @@ def test_luks2_open_rw(self):
 
 class CryptoTestEscrow(CryptoTestCase):
     def setUp(self):
+        # I am not able to generate a self-signed certificate that would work in FIPS
+        # so let's just skip this for now
+        fips = read_file("/proc/sys/crypto/fips_enabled")
+        if int(fips) == 1:
+            self.skipTest("Skipping escrow tests in FIPS mode")
+
         super(CryptoTestEscrow, self).setUp()
 
         # Create the certificate used to encrypt the escrow packet and backup passphrase.