From afc99941afad798b60b5d739433cd146f7a67c37 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Petr=20Men=C5=A1=C3=ADk?= Date: Mon, 25 Nov 2019 12:03:14 +0100 Subject: [PATCH] Pass rndc test also in FIPS mode In FIPS mode, rndc-keygen has to switch itself to algorithm different than default hmac-md5. It should fail with hmac-md5 in that mode, but should pass if algorithm was not given explicitly. --- Sanity/rndc-and-pkcs11/runtest.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Sanity/rndc-and-pkcs11/runtest.sh b/Sanity/rndc-and-pkcs11/runtest.sh index 8d0c946..c21e9d3 100644 --- a/Sanity/rndc-and-pkcs11/runtest.sh +++ b/Sanity/rndc-and-pkcs11/runtest.sh @@ -85,7 +85,7 @@ rlJournalStart rlPhaseEnd rlPhaseStartTest "Manual confgen test" - rlRun "rndc-confgen -a -A hmac-md5" 0 + rlRun "rndc-confgen -a" 0 RETURN=0 # it depends on fips mode status rlRun "systemctl restart named-pkcs11" 0 for i in `seq 1 10`;do rndc reload;done