tests: force FIPS testing mode with new enough GNU TLS versions

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

diff --git a/tests/virnettlscontexttest.c b/tests/virnettlscontexttest.c
index 51a036954ecc8925f4803e241405d194791686d7..a3e24a3535bd7cc0f56df58d92c51ab9db579bbe 100644 (file)
--- a/tests/virnettlscontexttest.c
+++ b/tests/virnettlscontexttest.c
@@ -113,6 +113,8 @@ mymain(void)
 {
     int ret = 0;
 
+    setenv("GNUTLS_FORCE_FIPS_MODE", "2", 1);
+
     testTLSInit(KEYFILE);
 
 # define DO_CTX_TEST(_isServer, _caCrt, _crt, _expectFail)              \

diff --git a/tests/virnettlssessiontest.c b/tests/virnettlssessiontest.c
index 1e2683cf3c0c1bea2a45ab6cf3270eda62ad55b0..3af948a9cd417b4ab075d57ea8dcc6e9e823b88d 100644 (file)
--- a/tests/virnettlssessiontest.c
+++ b/tests/virnettlssessiontest.c
@@ -240,6 +240,8 @@ mymain(void)
 {
     int ret = 0;
 
+    setenv("GNUTLS_FORCE_FIPS_MODE", "2", 1);
+
     testTLSInit(KEYFILE);
 
 # define DO_SESS_TEST(_caCrt, _serverCrt, _clientCrt, _expectServerFail, \