mirror of
https://github.com/nodejs/node.git
synced 2026-10-28 18:25:13 +08:00
Delete test-crypto-ecb.js, which can no longer run anywhere: Blowfish is available only from OpenSSL's legacy provider and is absent from BoringSSL. The addon and cctest version guards become OPENSSL_IS_BORINGSSL checks. Remove legacy digest-alias coverage and unreachable OpenSSL 1.x branches. JavaScript test and benchmark gates, skip reasons, and TLS error expectations that distinguished OpenSSL 1.x from provider-backed OpenSSL now distinguish BoringSSL, including PKCS12 parsing, named DH groups, private-key serialization, RSA-PSS parameters, consolidated provider caches, FIPS availability, and empty KMAC output. Keep the CCM alternate finalization error only for BoringSSL. Provider-only test skips use version-neutral terminology or state the actual minimum OpenSSL version. Signed-off-by: Filip Skokan <panva.ip@gmail.com> Assisted-by: Codex PR-URL: https://github.com/nodejs/node/pull/64777 Fixes: https://github.com/nodejs/node/issues/56733 Refs: https://github.com/nodejs/node/pull/64211 Refs: https://github.com/nodejs/node/pull/63966 Refs: https://github.com/nodejs/node/pull/53329 Refs: https://github.com/nodejs/node/pull/48950 Refs: https://github.com/nodejs/node/issues/45465 Refs: https://github.com/nodejs/node/issues/42827 Refs: https://github.com/nodejs/node/issues/47076 Refs: https://github.com/nodejs/node/pull/62862 Refs: https://github.com/nodejs/node/pull/38512 Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>
40 lines
1.2 KiB
JavaScript
40 lines
1.2 KiB
JavaScript
'use strict';
|
|
const common = require('../common');
|
|
const assert = require('assert');
|
|
|
|
if (!common.hasCrypto) {
|
|
common.skip('missing crypto');
|
|
}
|
|
const crypto = require('crypto');
|
|
const { hasFIPS, isBoringSSL } = require('../common/crypto');
|
|
|
|
// 'ClassName' : ['args', 'for', 'constructor']
|
|
const TEST_CASES = {
|
|
'Hash': ['sha1'],
|
|
'Hmac': ['sha1', 'Node'],
|
|
'Cipheriv': ['des-ede3-cbc', '0123456789abcd0123456789', '12345678'],
|
|
'Decipheriv': ['des-ede3-cbc', '0123456789abcd0123456789', '12345678'],
|
|
'Sign': ['RSA-SHA1'],
|
|
'Verify': ['RSA-SHA1'],
|
|
'DiffieHellman': [1024],
|
|
'DiffieHellmanGroup': ['modp5'],
|
|
'ECDH': ['prime256v1'],
|
|
};
|
|
|
|
if (hasFIPS(3)) {
|
|
TEST_CASES.Hmac = ['sha1', '0123456789abcdef'];
|
|
TEST_CASES.Cipheriv = [
|
|
'aes-128-cbc', '0123456789abcdef', '1234567890abcdef'];
|
|
TEST_CASES.Decipheriv = TEST_CASES.Cipheriv;
|
|
TEST_CASES.Sign = ['RSA-SHA256'];
|
|
TEST_CASES.Verify = ['RSA-SHA256'];
|
|
TEST_CASES.DiffieHellman = [2048];
|
|
TEST_CASES.DiffieHellmanGroup = ['modp14'];
|
|
} else if (crypto.getFips() !== 1) {
|
|
TEST_CASES.DiffieHellman = [isBoringSSL ? 256 : 1024];
|
|
}
|
|
|
|
for (const [clazz, args] of Object.entries(TEST_CASES)) {
|
|
assert(crypto[`create${clazz}`](...args) instanceof crypto[clazz]);
|
|
}
|