Skip to content

Commit fac3a26

Browse files
committed
ssl: fix test_pqc_sigalg on RHEL 9.7
RHEL 9.7 ships OpenSSL 3.5.1 with ML-DSA support, but it is disabled for TLS by default, according to the system configuration file: /etc/crypto-policies/back-ends/opensslcnf.config Specify SSLContext#sigalgs to override the default list.
1 parent 7f2e009 commit fac3a26

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

test/openssl/test_ssl.rb

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2084,6 +2084,7 @@ def test_pqc_sigalg
20842084
ctx_proc = -> ctx {
20852085
# Unset values set by start_server
20862086
ctx.cert = ctx.key = ctx.extra_chain_cert = nil
2087+
ctx.sigalgs = "rsa_pss_rsae_sha256:mldsa65"
20872088
ctx.add_certificate(mldsa_cert, mldsa)
20882089
ctx.add_certificate(rsa_cert, rsa)
20892090
}

0 commit comments

Comments
 (0)