Is it possible to disable FIPS tests?
blackcross86 opened this issue · comments
How to disable tests in cmake (FIPS)
@blackcross86 If you set FIPS_ENABLED=1 in the environment (or pass -DFIPS_ENABLED=on or equivalent to CMake CLI) this will disable the FIPS tests. This is because in a system with FIPS mode enabled, the FIPS related tests don't work if you have certain NSS patches (around crypto-policies -- they don't work because you can't exit FIPS mode).
However, there's a bunch of collateral tests that also get disabled. Does this suffice or would you want a RUN_FIPS_TEST or similar environment variable?
Why not run the FIPS tests? Is your version of NSS not compiled with support for FIPS mode?
@cipherboy
I have such an error, FIPS_ENABLED = 1 is written but does not help
@blackcross86 Very interesting! What version of NSS out of curiosity?
@cipherboy 3.70
@blackcross86 did you get the test passing? If yes I will close the issues otherwise could you provide more info on the environment beside NSS which you already provided?