Browse Source

test: enable to work pkcs12 test in FIPS mode

The pfx file created by pkcs12 command of openssl causes an error in
FIPS mode because its certificate is encrypted with RC2 by default.
Adding `-descert` option resolves the error.

Fix: https://github.com/nodejs/node/pull/5144
Fix: https://github.com/nodejs/node/pull/5109
PR-URL: https://github.com/nodejs/node/pull/5150
Reviewed-By: Rich Trott <rtrott@gmail.com>
process-exit-stdio-flushing
Shigeki Ohtsu 9 years ago
parent
commit
dccccbbbe7
  1. 1
      test/fixtures/keys/Makefile
  2. BIN
      test/fixtures/keys/agent1-pfx.pem
  3. 5
      test/parallel/test-tls-pfx-gh-5100-regr.js

1
test/fixtures/keys/Makefile

@ -81,6 +81,7 @@ agent1-cert.pem: agent1-csr.pem ca1-cert.pem ca1-key.pem
agent1-pfx.pem: agent1-cert.pem agent1-key.pem ca1-cert.pem
openssl pkcs12 -export \
-descert \
-in agent1-cert.pem \
-inkey agent1-key.pem \
-certfile ca1-cert.pem \

BIN
test/fixtures/keys/agent1-pfx.pem

Binary file not shown.

5
test/parallel/test-tls-pfx-gh-5100-regr.js

@ -7,11 +7,6 @@ if (!common.hasCrypto) {
return;
}
if (common.hasFipsCrypto) {
console.log('1..0 # Skipped: PFX does not work in FIPS mode');
return;
}
const assert = require('assert');
const tls = require('tls');
const fs = require('fs');

Loading…
Cancel
Save