Skip to content

Commit 46dc12b

Browse files
Shigeki OhtsuMyles Borins
authored andcommitted
test: enable to work pkcs12 test in FIPS mode
The pfx file created by pkcs12 command of openssl causes an error in FIPS mode because its certificate is encrypted with RC2 by default. Adding `-descert` option resolves the error. Fix: #5144 Fix: #5109 PR-URL: #5150 Reviewed-By: Rich Trott <[email protected]>
1 parent e19b8ea commit 46dc12b

File tree

3 files changed

+1
-5
lines changed

3 files changed

+1
-5
lines changed

test/fixtures/keys/Makefile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -81,6 +81,7 @@ agent1-cert.pem: agent1-csr.pem ca1-cert.pem ca1-key.pem
8181

8282
agent1-pfx.pem: agent1-cert.pem agent1-key.pem ca1-cert.pem
8383
openssl pkcs12 -export \
84+
-descert \
8485
-in agent1-cert.pem \
8586
-inkey agent1-key.pem \
8687
-certfile ca1-cert.pem \

test/fixtures/keys/agent1-pfx.pem

0 Bytes
Binary file not shown.

test/parallel/test-tls-pfx-gh-5100-regr.js

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -7,11 +7,6 @@ if (!common.hasCrypto) {
77
return;
88
}
99

10-
if (common.hasFipsCrypto) {
11-
console.log('1..0 # Skipped: PFX does not work in FIPS mode');
12-
return;
13-
}
14-
1510
const assert = require('assert');
1611
const tls = require('tls');
1712
const fs = require('fs');

0 commit comments

Comments
 (0)