Added check for GNUtls in FIPS140 mode

SUSE · Nov 29, 2024 · aed3125 · aed3125
1 parent 7fae3a3
commit aed3125
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/tests/test_fips.py b/tests/test_fips.py
@@ -195,6 +195,10 @@ def test_gnutls_binary(container_per_test: ContainerData) -> None:
         "mv fips-test-gnutls /bin/fips-test-gnutls"
     )
 
+    assert "NOT" not in container_per_test.connection.check_output(
+        "gnutls-cli --fips140-mode"
+    ), "Container library not in FIPS140 mode"
+
     expected_fips_gnutls_digests = {
         "sha1": "c87d25a09584c040f3bfc53b570199591deb10ba648a6a6ffffdaa0badb23b8baf90b6168dd16b3a",
         "sha224": "54655eae3d97147de34564572231c34d6d0917dd7852b5b93647fb4fe53ee97e5e0a2a4d359b5b461409dc44d9315afbc3b7d6bc5cd598e6",