mirror of
https://github.com/nodejs/node.git
synced 2026-10-28 10:15:07 +08:00
Filip Skokan
acbc3ff133
Delete test-crypto-ecb.js, which can no longer run anywhere: Blowfish is available only from OpenSSL's legacy provider and is absent from BoringSSL. The addon and cctest version guards become OPENSSL_IS_BORINGSSL checks. Remove legacy digest-alias coverage and unreachable OpenSSL 1.x branches. JavaScript test and benchmark gates, skip reasons, and TLS error expectations that distinguished OpenSSL 1.x from provider-backed OpenSSL now distinguish BoringSSL, including PKCS12 parsing, named DH groups, private-key serialization, RSA-PSS parameters, consolidated provider caches, FIPS availability, and empty KMAC output. Keep the CCM alternate finalization error only for BoringSSL. Provider-only test skips use version-neutral terminology or state the actual minimum OpenSSL version. Signed-off-by: Filip Skokan <panva.ip@gmail.com> Assisted-by: Codex PR-URL: https://github.com/nodejs/node/pull/64777 Fixes: https://github.com/nodejs/node/issues/56733 Refs: https://github.com/nodejs/node/pull/64211 Refs: https://github.com/nodejs/node/pull/63966 Refs: https://github.com/nodejs/node/pull/53329 Refs: https://github.com/nodejs/node/pull/48950 Refs: https://github.com/nodejs/node/issues/45465 Refs: https://github.com/nodejs/node/issues/42827 Refs: https://github.com/nodejs/node/issues/47076 Refs: https://github.com/nodejs/node/pull/62862 Refs: https://github.com/nodejs/node/pull/38512 Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Richard Lau <richard.lau@ibm.com> Reviewed-By: Gürgün Dayıoğlu <hey@gurgun.day>
63 lines
1.8 KiB
JavaScript
63 lines
1.8 KiB
JavaScript
'use strict';
|
|
|
|
const common = require('../common');
|
|
if (!common.hasCrypto)
|
|
common.skip('missing crypto');
|
|
|
|
const {
|
|
isBoringSSL,
|
|
hasFIPS,
|
|
} = require('../common/crypto');
|
|
|
|
if (isBoringSSL)
|
|
common.skip('BoringSSL does not support arbitrary RSA modulus length ' +
|
|
'or RSA-PSS/DSA key generation');
|
|
|
|
const assert = require('assert');
|
|
const {
|
|
generateKeyPair,
|
|
} = require('crypto');
|
|
const fips3 = hasFIPS(3);
|
|
|
|
// This tests check that generateKeyPair returns correct bit length in
|
|
// KeyObject's asymmetricKeyDetails.
|
|
// https://github.com/nodejs/node/issues/46102#issuecomment-1372153541
|
|
{
|
|
generateKeyPair('rsa', {
|
|
modulusLength: 513,
|
|
}, common.mustCall((err, publicKey, privateKey) => {
|
|
if (fips3) {
|
|
assert.strictEqual(err?.code, 'ERR_OSSL_RSA_INVALID_MODULUS');
|
|
return;
|
|
}
|
|
assert.ifError(err);
|
|
assert.strictEqual(privateKey.asymmetricKeyDetails.modulusLength, 513);
|
|
assert.strictEqual(publicKey.asymmetricKeyDetails.modulusLength, 513);
|
|
}));
|
|
|
|
generateKeyPair('rsa-pss', {
|
|
modulusLength: 513,
|
|
}, common.mustCall((err, publicKey, privateKey) => {
|
|
if (fips3) {
|
|
assert.strictEqual(err?.code, 'ERR_OSSL_RSA_INVALID_MODULUS');
|
|
return;
|
|
}
|
|
assert.ifError(err);
|
|
assert.strictEqual(privateKey.asymmetricKeyDetails.modulusLength, 513);
|
|
assert.strictEqual(publicKey.asymmetricKeyDetails.modulusLength, 513);
|
|
}));
|
|
|
|
generateKeyPair('dsa', {
|
|
modulusLength: 2049,
|
|
divisorLength: 256,
|
|
}, common.mustCall((err, publicKey, privateKey) => {
|
|
if (fips3) {
|
|
assert.strictEqual(err?.code, 'ERR_OSSL_DSA_BAD_FFC_PARAMETERS');
|
|
return;
|
|
}
|
|
assert.ifError(err);
|
|
assert.strictEqual(privateKey.asymmetricKeyDetails.modulusLength, 2049);
|
|
assert.strictEqual(publicKey.asymmetricKeyDetails.modulusLength, 2049);
|
|
}));
|
|
}
|