Open Bug 1589755 Opened 6 years ago Updated 1 year ago

Taskcluster scripts should enable FIPS for all.sh tests

Categories

(NSS :: Test, enhancement, P3)

enhancement

Tracking

(Not tracked)

People

(Reporter: kjacobs, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: [nss-nofx][nss-ci])

We define NSS_FORCE_FIPS for FIPS make builds in extend.js, but it appears this is undefined when executing all.sh. We should audit for the exact gaps in test coverage, and enable FIPS more thoroughly where appropriate.

Analysing the all.sh script, it consider to run fips tests depending of some build-flags.
https://searchfox.org/mozilla-central/source/security/nss/tests/all.sh#294

I didn't dig the extend.js, but maybe we can increase this condition to consider this ENV too.

Assignee: nobody → marcus.apb
Status: NEW → ASSIGNED
Priority: -- → P1

The bug assignee didn't login in Bugzilla in the last months and this bug has priority 'P1'.
:beurdouche, could you have a look please?
For more information, please visit auto_nag documentation.

Assignee: marcus.apb → nobody
Status: ASSIGNED → NEW
Flags: needinfo?(bbeurdouche)
Severity: normal → S3
Severity: normal → S3
Severity: S3 → N/A
Priority: P1 → P3
Flags: needinfo?(bbeurdouche)
Whiteboard: [nss-nofx][nss-ci]
Severity: N/A → S4
You need to log in before you can comment on or make changes to this bug.