crypto/internal/fips140test: require FIPS 140 mode for the ACVP wrapper

Change-Id: I6a6a46565c14cf1d924a8fcfbf6752e9646ec63d
Reviewed-on: https://go-review.googlesource.com/c/go/+/648818
Reviewed-by: Daniel McCarney <daniel@binaryparadox.net>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
Auto-Submit: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Ian Lance Taylor <iant@google.com>
This commit is contained in:
Filippo Valsorda 2025-02-06 11:34:48 +01:00 committed by Gopher Robot
parent 4ffa9a8305
commit 8659ad9049
1 changed files with 5 additions and 0 deletions

View File

@ -75,6 +75,10 @@ func TestMain(m *testing.M) {
}
func wrapperMain() {
if !fips140.Enabled {
fmt.Fprintln(os.Stderr, "ACVP wrapper must be run with GODEBUG=fips140=on")
os.Exit(2)
}
if err := processingLoop(bufio.NewReader(os.Stdin), os.Stdout); err != nil {
fmt.Fprintf(os.Stderr, "processing error: %v\n", err)
os.Exit(1)
@ -2129,6 +2133,7 @@ func TestACVP(t *testing.T) {
cmd = testenv.Command(t, goTool, args...)
cmd.Dir = dataDir
cmd.Env = append(os.Environ(), "ACVP_WRAPPER=1")
cmd.Env = append(os.Environ(), "GODEBUG=fips140=on")
output, err := cmd.CombinedOutput()
if err != nil {
t.Fatalf("failed to run acvp tests: %s\n%s", err, string(output))