| .. | .. | 
|---|
| 81 | 81 |  | 
|---|
| 82 | 82 | which ping6 > /dev/null 2>&1 && ping6=$(which ping6) || ping6=$(which ping) | 
|---|
| 83 | 83 |  | 
|---|
|  | 84 | +# Check if FIPS mode is enabled | 
|---|
|  | 85 | +if [ -f /proc/sys/crypto/fips_enabled ]; then | 
|---|
|  | 86 | +	fips_enabled=`cat /proc/sys/crypto/fips_enabled` | 
|---|
|  | 87 | +else | 
|---|
|  | 88 | +	fips_enabled=0 | 
|---|
|  | 89 | +fi | 
|---|
|  | 90 | + | 
|---|
| 84 | 91 | ################################################################################ | 
|---|
| 85 | 92 | # utilities | 
|---|
| 86 | 93 |  | 
|---|
| .. | .. | 
|---|
| 1139 | 1146 | run_cmd nettest -d ${NSA_DEV} -r ${a} | 
|---|
| 1140 | 1147 | log_test_addr ${a} $? 1 "No server, device client, local conn" | 
|---|
| 1141 | 1148 |  | 
|---|
| 1142 |  | -	ipv4_tcp_md5_novrf | 
|---|
|  | 1149 | +	[ "$fips_enabled" = "1" ] || ipv4_tcp_md5_novrf | 
|---|
| 1143 | 1150 | } | 
|---|
| 1144 | 1151 |  | 
|---|
| 1145 | 1152 | ipv4_tcp_vrf() | 
|---|
| .. | .. | 
|---|
| 1193 | 1200 | log_test_addr ${a} $? 1 "Global server, local connection" | 
|---|
| 1194 | 1201 |  | 
|---|
| 1195 | 1202 | # run MD5 tests | 
|---|
| 1196 |  | -	setup_vrf_dup | 
|---|
| 1197 |  | -	ipv4_tcp_md5 | 
|---|
| 1198 |  | -	cleanup_vrf_dup | 
|---|
|  | 1203 | +	if [ "$fips_enabled" = "0" ]; then | 
|---|
|  | 1204 | +		setup_vrf_dup | 
|---|
|  | 1205 | +		ipv4_tcp_md5 | 
|---|
|  | 1206 | +		cleanup_vrf_dup | 
|---|
|  | 1207 | +	fi | 
|---|
| 1199 | 1208 |  | 
|---|
| 1200 | 1209 | # | 
|---|
| 1201 | 1210 | # enable VRF global server | 
|---|
| .. | .. | 
|---|
| 2611 | 2620 | log_test_addr ${a} $? 1 "No server, device client, local conn" | 
|---|
| 2612 | 2621 | done | 
|---|
| 2613 | 2622 |  | 
|---|
| 2614 |  | -	ipv6_tcp_md5_novrf | 
|---|
|  | 2623 | +	[ "$fips_enabled" = "1" ] || ipv6_tcp_md5_novrf | 
|---|
| 2615 | 2624 | } | 
|---|
| 2616 | 2625 |  | 
|---|
| 2617 | 2626 | ipv6_tcp_vrf() | 
|---|
| .. | .. | 
|---|
| 2681 | 2690 | log_test_addr ${a} $? 1 "Global server, local connection" | 
|---|
| 2682 | 2691 |  | 
|---|
| 2683 | 2692 | # run MD5 tests | 
|---|
| 2684 |  | -	setup_vrf_dup | 
|---|
| 2685 |  | -	ipv6_tcp_md5 | 
|---|
| 2686 |  | -	cleanup_vrf_dup | 
|---|
|  | 2693 | +	if [ "$fips_enabled" = "0" ]; then | 
|---|
|  | 2694 | +		setup_vrf_dup | 
|---|
|  | 2695 | +		ipv6_tcp_md5 | 
|---|
|  | 2696 | +		cleanup_vrf_dup | 
|---|
|  | 2697 | +	fi | 
|---|
| 2687 | 2698 |  | 
|---|
| 2688 | 2699 | # | 
|---|
| 2689 | 2700 | # enable VRF global server | 
|---|