Re: [PATCH net 2/3] selftests: net: vrf-xfrm-tests: change authentication and encryption algos

From: David Ahern
Date: Wed Jun 07 2023 - 14:35:09 EST


On 6/7/23 11:43 AM, Magali Lemes wrote:
> The vrf-xfrm-tests tests use the hmac(md5) and cbc(des3_ede)
> algorithms for performing authentication and encryption, respectively.
> This causes the tests to fail when fips=1 is set, since these algorithms
> are not allowed in FIPS mode. Therefore, switch from hmac(md5) and
> cbc(des3_ede) to hmac(sha1) and cbc(aes), which are FIPS compliant.
>
> Fixes: 3f251d741150 ("selftests: Add tests for vrf and xfrms")
> Signed-off-by: Magali Lemes <magali.lemes@xxxxxxxxxxxxx>
> ---
> tools/testing/selftests/net/vrf-xfrm-tests.sh | 32 +++++++++----------
> 1 file changed, 16 insertions(+), 16 deletions(-)

Reviewed-by: David Ahern <dsahern@xxxxxxxxxx>