828b786e48
Check that invalid DSA key sizes are rejected in FIPS mode. PR-URL: https://github.com/nodejs/node/pull/3756 Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com> Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp> Reviewed-By: James M Snell <jasnell@gmail.com>
24 lines
637 B
JavaScript
24 lines
637 B
JavaScript
'use strict';
|
|
var common = require('../common');
|
|
var assert = require('assert');
|
|
|
|
if (!common.hasFipsCrypto) {
|
|
console.log('1..0 # Skipped: node compiled without FIPS OpenSSL.');
|
|
return;
|
|
}
|
|
|
|
var crypto = require('crypto');
|
|
var fs = require('fs');
|
|
|
|
var input = 'hello';
|
|
|
|
var dsapub = fs.readFileSync(common.fixturesDir +
|
|
'/keys/dsa_public_1025.pem');
|
|
var dsapri = fs.readFileSync(common.fixturesDir +
|
|
'/keys/dsa_private_1025.pem');
|
|
var sign = crypto.createSign('DSS1');
|
|
sign.update(input);
|
|
|
|
assert.throws(function() {
|
|
sign.sign(dsapri);
|
|
}, /PEM_read_bio_PrivateKey failed/);
|