From c98672ae7f14cb92f2af65be0d3a0a96fd72098a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Franti=C5=A1ek=20Hrdina?= Date: Wed, 19 Mar 2025 13:15:02 +0100 Subject: [PATCH] Adjust ssl-enum-ciphers-test for rhel10 and fedora fips-mode-setup is not available on newer fedoras and rhel10 --- .../test.sh | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/Sanity/ssl-enum-ciphers-ems-extension-support/test.sh b/Sanity/ssl-enum-ciphers-ems-extension-support/test.sh index 184e068..38fa40e 100755 --- a/Sanity/ssl-enum-ciphers-ems-extension-support/test.sh +++ b/Sanity/ssl-enum-ciphers-ems-extension-support/test.sh @@ -13,7 +13,12 @@ PORT="12345" rlJournalStart if [ "$REBOOTCOUNT" -eq 0 ]; then rlPhaseStartSetup "Enable fips" - rlRun "fips-mode-setup --enable" 0 "Enable fips" + if rlIsFedora '>=41'|| rlIsRHELLike '>=10'; then + rlRun "grubby --update-kernel=ALL --args=\"fips=1\"" + else + rlRun "fips-mode-setup --enable" 0 "Enable fips" + fi + rlLog "Rebooting" tmt-reboot rlPhaseEnd @@ -65,7 +70,13 @@ EOL rlPhaseEnd rlPhaseStartCleanup "Disable fips" - rlRun "fips-mode-setup --disable" 0 "Disable fips" + rlPhaseStartSetup "Enable fips" + if rlIsFedora '>=41' || rlIsRHELLike '>=10'; then + rlRun "grubby --update-kernel=ALL --args=\"fips=0\"" + else + rlRun "fips-mode-setup --disable" 0 "Disable fips" + fi + rlLog "Rebooting" tmt-reboot rlPhaseEnd