Skip to content

Test failures with FIPS enabled #48379

Closed as not planned
Closed as not planned
Test failures with FIPS enabled#48379
Labels
cryptoIssues and PRs related to the crypto subsystem.staleIssues and PRs marked stale due to inactivity and scheduled for automatic closure.testIssues and PRs related to Node.js core tests and test infrastructure.

Description

@richardlau
richardlau
opened on Jun 7, 2023

Background

Previously we used to have a CI configuration for testing Node.js with FIPS enabled back when we were using OpenSSL 1.0.2. We stopped in Node.js 10.x when we moved to OpenSSL 1.1.x as there was no upstream OpenSSL support for FIPS in that version. With OpenSSL 3, FIPS is back, this time as an OpenSSL 3 provider.

I've started work on re-adding a FIPS enabled configuration to our CI. For now this is in a temporary separate job as there are test failures.

richardlau-node-test-commit-linux-containered is based on node-test-commit-linux-containered with extra configurations, one of which, ubuntu2204_sharedlibs_openssl30fips_x64, is for FIPS enablement with OpenSSL 3. I've put together a slimmed down version of the container we're using in https://github.com/richardlau/ubuntu2204_fips for replication outside of the CI.

List of failing tests with FIPS enabled

e.g. https://ci.nodejs.org/job/richardlau-node-test-commit-linux-containered/14/nodes=ubuntu2204_sharedlibs_openssl30fips_x64
(on a929522)

cc @nodejs/crypto

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    cryptoIssues and PRs related to the crypto subsystem.staleIssues and PRs marked stale due to inactivity and scheduled for automatic closure.testIssues and PRs related to Node.js core tests and test infrastructure.

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions