| .. | .. |
|---|
| 81 | 81 | |
|---|
| 82 | 82 | which ping6 > /dev/null 2>&1 && ping6=$(which ping6) || ping6=$(which ping) |
|---|
| 83 | 83 | |
|---|
| 84 | +# Check if FIPS mode is enabled |
|---|
| 85 | +if [ -f /proc/sys/crypto/fips_enabled ]; then |
|---|
| 86 | + fips_enabled=`cat /proc/sys/crypto/fips_enabled` |
|---|
| 87 | +else |
|---|
| 88 | + fips_enabled=0 |
|---|
| 89 | +fi |
|---|
| 90 | + |
|---|
| 84 | 91 | ################################################################################ |
|---|
| 85 | 92 | # utilities |
|---|
| 86 | 93 | |
|---|
| .. | .. |
|---|
| 1139 | 1146 | run_cmd nettest -d ${NSA_DEV} -r ${a} |
|---|
| 1140 | 1147 | log_test_addr ${a} $? 1 "No server, device client, local conn" |
|---|
| 1141 | 1148 | |
|---|
| 1142 | | - ipv4_tcp_md5_novrf |
|---|
| 1149 | + [ "$fips_enabled" = "1" ] || ipv4_tcp_md5_novrf |
|---|
| 1143 | 1150 | } |
|---|
| 1144 | 1151 | |
|---|
| 1145 | 1152 | ipv4_tcp_vrf() |
|---|
| .. | .. |
|---|
| 1193 | 1200 | log_test_addr ${a} $? 1 "Global server, local connection" |
|---|
| 1194 | 1201 | |
|---|
| 1195 | 1202 | # run MD5 tests |
|---|
| 1196 | | - setup_vrf_dup |
|---|
| 1197 | | - ipv4_tcp_md5 |
|---|
| 1198 | | - cleanup_vrf_dup |
|---|
| 1203 | + if [ "$fips_enabled" = "0" ]; then |
|---|
| 1204 | + setup_vrf_dup |
|---|
| 1205 | + ipv4_tcp_md5 |
|---|
| 1206 | + cleanup_vrf_dup |
|---|
| 1207 | + fi |
|---|
| 1199 | 1208 | |
|---|
| 1200 | 1209 | # |
|---|
| 1201 | 1210 | # enable VRF global server |
|---|
| .. | .. |
|---|
| 2611 | 2620 | log_test_addr ${a} $? 1 "No server, device client, local conn" |
|---|
| 2612 | 2621 | done |
|---|
| 2613 | 2622 | |
|---|
| 2614 | | - ipv6_tcp_md5_novrf |
|---|
| 2623 | + [ "$fips_enabled" = "1" ] || ipv6_tcp_md5_novrf |
|---|
| 2615 | 2624 | } |
|---|
| 2616 | 2625 | |
|---|
| 2617 | 2626 | ipv6_tcp_vrf() |
|---|
| .. | .. |
|---|
| 2681 | 2690 | log_test_addr ${a} $? 1 "Global server, local connection" |
|---|
| 2682 | 2691 | |
|---|
| 2683 | 2692 | # run MD5 tests |
|---|
| 2684 | | - setup_vrf_dup |
|---|
| 2685 | | - ipv6_tcp_md5 |
|---|
| 2686 | | - cleanup_vrf_dup |
|---|
| 2693 | + if [ "$fips_enabled" = "0" ]; then |
|---|
| 2694 | + setup_vrf_dup |
|---|
| 2695 | + ipv6_tcp_md5 |
|---|
| 2696 | + cleanup_vrf_dup |
|---|
| 2697 | + fi |
|---|
| 2687 | 2698 | |
|---|
| 2688 | 2699 | # |
|---|
| 2689 | 2700 | # enable VRF global server |
|---|