[3.9] gh-109396: Fix test_socket.test_hmac_sha1() in FIPS mode (GH-109423)

Open miss-islington opened this issue 1 year ago • 3 comments

gh-109396: Fix test_socket.test_hmac_sha1() in FIPS mode (GH-109423)

Use a longer key: FIPS mode requires at least of at least 112 bits. The previous key was only 32 bits. (cherry picked from commit e091b9f20fa8e409003af79f3c468b8225e6dcd3)

(cherry picked from commit f7bfac4b3dd30920f97a542fd78c355ce62aa267)

Co-authored-by: Miss Islington (bot) [email protected] Co-authored-by: Victor Stinner [email protected]

Oct 08 '24 12:10 miss-islington

!buildbot FIPS

Oct 10 '24 11:10 encukou

:robot: New build scheduled with the buildbot fleet by @encukou for commit cbbf2b9938472fa0c4504e5f600b9bec2b72ce79 :robot:

The command will test the builders whose names match following regular expression: FIPS

The builders matched are:

AMD64 CentOS9 FIPS Only Blake2 Builtin Hash PR
AMD64 RHEL8 FIPS Only Blake2 Builtin Hash PR
AMD64 RHEL8 FIPS No Builtin Hashes PR
AMD64 CentOS9 FIPS No Builtin Hashes PR

Oct 10 '24 11:10 bedevere-bot

Note that we care about Only Blake2 builds, which passed here. The red No Builtin Hashes FIPS builds are unstable and never passed.

Oct 10 '24 14:10 encukou

!buildbot FIPS No Builtin

Oct 29 '24 10:10 encukou

:robot: New build scheduled with the buildbot fleet by @encukou for commit c8eeb4c5d8d391f0c305d959b9af47b1520b873b :robot:

The command will test the builders whose names match following regular expression: FIPS No Builtin

The builders matched are:

AMD64 RHEL8 FIPS No Builtin Hashes PR
AMD64 CentOS9 FIPS No Builtin Hashes PR

Oct 29 '24 10:10 bedevere-bot