.. | .. |
---|
81 | 81 | |
---|
82 | 82 | which ping6 > /dev/null 2>&1 && ping6=$(which ping6) || ping6=$(which ping) |
---|
83 | 83 | |
---|
| 84 | +# Check if FIPS mode is enabled |
---|
| 85 | +if [ -f /proc/sys/crypto/fips_enabled ]; then |
---|
| 86 | + fips_enabled=`cat /proc/sys/crypto/fips_enabled` |
---|
| 87 | +else |
---|
| 88 | + fips_enabled=0 |
---|
| 89 | +fi |
---|
| 90 | + |
---|
84 | 91 | ################################################################################ |
---|
85 | 92 | # utilities |
---|
86 | 93 | |
---|
.. | .. |
---|
1139 | 1146 | run_cmd nettest -d ${NSA_DEV} -r ${a} |
---|
1140 | 1147 | log_test_addr ${a} $? 1 "No server, device client, local conn" |
---|
1141 | 1148 | |
---|
1142 | | - ipv4_tcp_md5_novrf |
---|
| 1149 | + [ "$fips_enabled" = "1" ] || ipv4_tcp_md5_novrf |
---|
1143 | 1150 | } |
---|
1144 | 1151 | |
---|
1145 | 1152 | ipv4_tcp_vrf() |
---|
.. | .. |
---|
1193 | 1200 | log_test_addr ${a} $? 1 "Global server, local connection" |
---|
1194 | 1201 | |
---|
1195 | 1202 | # run MD5 tests |
---|
1196 | | - setup_vrf_dup |
---|
1197 | | - ipv4_tcp_md5 |
---|
1198 | | - cleanup_vrf_dup |
---|
| 1203 | + if [ "$fips_enabled" = "0" ]; then |
---|
| 1204 | + setup_vrf_dup |
---|
| 1205 | + ipv4_tcp_md5 |
---|
| 1206 | + cleanup_vrf_dup |
---|
| 1207 | + fi |
---|
1199 | 1208 | |
---|
1200 | 1209 | # |
---|
1201 | 1210 | # enable VRF global server |
---|
.. | .. |
---|
2611 | 2620 | log_test_addr ${a} $? 1 "No server, device client, local conn" |
---|
2612 | 2621 | done |
---|
2613 | 2622 | |
---|
2614 | | - ipv6_tcp_md5_novrf |
---|
| 2623 | + [ "$fips_enabled" = "1" ] || ipv6_tcp_md5_novrf |
---|
2615 | 2624 | } |
---|
2616 | 2625 | |
---|
2617 | 2626 | ipv6_tcp_vrf() |
---|
.. | .. |
---|
2681 | 2690 | log_test_addr ${a} $? 1 "Global server, local connection" |
---|
2682 | 2691 | |
---|
2683 | 2692 | # run MD5 tests |
---|
2684 | | - setup_vrf_dup |
---|
2685 | | - ipv6_tcp_md5 |
---|
2686 | | - cleanup_vrf_dup |
---|
| 2693 | + if [ "$fips_enabled" = "0" ]; then |
---|
| 2694 | + setup_vrf_dup |
---|
| 2695 | + ipv6_tcp_md5 |
---|
| 2696 | + cleanup_vrf_dup |
---|
| 2697 | + fi |
---|
2687 | 2698 | |
---|
2688 | 2699 | # |
---|
2689 | 2700 | # enable VRF global server |
---|