提交 300e8c4b 编写于 作者: M Matt Caswell 提交者: Richard Levitte

Fix no-dsa

Skip tests that require DSA to be available. While we're doing this
we also remove an OPENSSL_NO_DSA guard in the dhparam app that is no
longer necessary (even though DSA may not be present in our own providers
it could be available via a third party provider).
Reviewed-by: NRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/13599)
上级 c2386b81
...@@ -47,10 +47,8 @@ const OPTIONS dhparam_options[] = { ...@@ -47,10 +47,8 @@ const OPTIONS dhparam_options[] = {
OPT_SECTION("General"), OPT_SECTION("General"),
{"help", OPT_HELP, '-', "Display this summary"}, {"help", OPT_HELP, '-', "Display this summary"},
{"check", OPT_CHECK, '-', "Check the DH parameters"}, {"check", OPT_CHECK, '-', "Check the DH parameters"},
#ifndef OPENSSL_NO_DSA
{"dsaparam", OPT_DSAPARAM, '-', {"dsaparam", OPT_DSAPARAM, '-',
"Read or generate DSA parameters, convert to DH"}, "Read or generate DSA parameters, convert to DH"},
#endif
#ifndef OPENSSL_NO_ENGINE #ifndef OPENSSL_NO_ENGINE
{"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"}, {"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"},
#endif #endif
......
...@@ -141,27 +141,31 @@ subtest "Generate: 512 bit PKCS3 params, generator 2, explicit PEM file" => sub ...@@ -141,27 +141,31 @@ subtest "Generate: 512 bit PKCS3 params, generator 2, explicit PEM file" => sub
'-outform', 'PEM', '512' ]))); '-outform', 'PEM', '512' ])));
checkdhparams("gen-pkcs3-2-512.exp.pem", "PKCS3", 2, "PEM", 512); checkdhparams("gen-pkcs3-2-512.exp.pem", "PKCS3", 2, "PEM", 512);
}; };
subtest "Generate: 512 bit X9.42 params, generator 0, PEM file" => sub { SKIP: {
skip "Skipping tests that require DSA", 4 if disabled("dsa");
subtest "Generate: 512 bit X9.42 params, generator 0, PEM file" => sub {
plan tests => 5; plan tests => 5;
ok(run(app([ 'openssl', 'dhparam', '-out', 'gen-x942-0-512.pem', ok(run(app([ 'openssl', 'dhparam', '-out', 'gen-x942-0-512.pem',
'-dsaparam', '512' ]))); '-dsaparam', '512' ])));
checkdhparams("gen-x942-0-512.pem", "X9.42", 0, "PEM", 512); checkdhparams("gen-x942-0-512.pem", "X9.42", 0, "PEM", 512);
}; };
subtest "Generate: 512 bit X9.42 params, explicit generator 2, PEM file" => sub { subtest "Generate: 512 bit X9.42 params, explicit generator 2, PEM file" => sub {
plan tests => 1; plan tests => 1;
#Expected to fail - you cannot select a generator with '-dsaparam' #Expected to fail - you cannot select a generator with '-dsaparam'
ok(!run(app([ 'openssl', 'dhparam', '-out', 'gen-x942-exp2-512.pem', '-2', ok(!run(app([ 'openssl', 'dhparam', '-out', 'gen-x942-exp2-512.pem', '-2',
'-dsaparam', '512' ]))); '-dsaparam', '512' ])));
}; };
subtest "Generate: 512 bit X9.42 params, generator 5, PEM file" => sub { subtest "Generate: 512 bit X9.42 params, generator 5, PEM file" => sub {
plan tests => 1; plan tests => 1;
#Expected to fail - you cannot select a generator with '-dsaparam' #Expected to fail - you cannot select a generator with '-dsaparam'
ok(!run(app([ 'openssl', 'dhparam', '-out', 'gen-x942-5-512.pem', ok(!run(app([ 'openssl', 'dhparam', '-out', 'gen-x942-5-512.pem',
'-5', '-dsaparam', '512' ]))); '-5', '-dsaparam', '512' ])));
}; };
subtest "Generate: 512 bit X9.42 params, generator 0, DER file" => sub { subtest "Generate: 512 bit X9.42 params, generator 0, DER file" => sub {
plan tests => 5; plan tests => 5;
ok(run(app([ 'openssl', 'dhparam', '-out', 'gen-x942-0-512.der', ok(run(app([ 'openssl', 'dhparam', '-out', 'gen-x942-0-512.der',
'-dsaparam', '-outform', 'DER', '512' ]))); '-dsaparam', '-outform', 'DER', '512' ])));
checkdhparams("gen-x942-0-512.der", "X9.42", 0, "DER", 512); checkdhparams("gen-x942-0-512.der", "X9.42", 0, "DER", 512);
}; };
}
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册