Blame SOURCES/gnutls-3.3.29-fips140-fix-ecdsa-kat-selftest.patch

519d7d
--- a/lib/crypto-selftests-pk.c	2019-02-06 14:49:44.807422315 +0100
519d7d
+++ b/lib/crypto-selftests-pk.c	2019-02-06 14:56:40.311049707 +0100
519d7d
@@ -731,30 +731,9 @@
519d7d
 			goto cleanup;
519d7d
 		}
519d7d
 
519d7d
-		if (all == 0)
519d7d
-			return 0;
519d7d
 #endif
519d7d
 
519d7d
 		/* Test ECDSA */
519d7d
-#ifdef ENABLE_NON_SUITEB_CURVES
519d7d
-		PK_KNOWN_TEST(GNUTLS_PK_EC, 0,
519d7d
-			      GNUTLS_CURVE_TO_BITS
519d7d
-			      (GNUTLS_ECC_CURVE_SECP192R1),
519d7d
-			      GNUTLS_DIG_SHA256, ecdsa_secp192r1_privkey,
519d7d
-			      ecdsa_secp192r1_sig);
519d7d
-		PK_TEST(GNUTLS_PK_EC, test_sig,
519d7d
-			GNUTLS_CURVE_TO_BITS(GNUTLS_ECC_CURVE_SECP192R1),
519d7d
-			GNUTLS_DIG_SHA256);
519d7d
-
519d7d
-		PK_KNOWN_TEST(GNUTLS_PK_EC, 0,
519d7d
-			      GNUTLS_CURVE_TO_BITS
519d7d
-			      (GNUTLS_ECC_CURVE_SECP224R1),
519d7d
-			      GNUTLS_DIG_SHA256, ecdsa_secp224r1_privkey,
519d7d
-			      ecdsa_secp224r1_sig);
519d7d
-		PK_TEST(GNUTLS_PK_EC, test_sig,
519d7d
-			GNUTLS_CURVE_TO_BITS(GNUTLS_ECC_CURVE_SECP224R1),
519d7d
-			GNUTLS_DIG_SHA256);
519d7d
-#endif
519d7d
 		PK_KNOWN_TEST(GNUTLS_PK_EC, 0,
519d7d
 			      GNUTLS_CURVE_TO_BITS
519d7d
 			      (GNUTLS_ECC_CURVE_SECP256R1),
519d7d
@@ -764,6 +743,9 @@
519d7d
 			GNUTLS_CURVE_TO_BITS(GNUTLS_ECC_CURVE_SECP256R1),
519d7d
 			GNUTLS_DIG_SHA256);
519d7d
 
519d7d
+		if (all == 0)
519d7d
+			return 0;
519d7d
+
519d7d
 		PK_KNOWN_TEST(GNUTLS_PK_EC, 0,
519d7d
 			      GNUTLS_CURVE_TO_BITS
519d7d
 			      (GNUTLS_ECC_CURVE_SECP384R1),
519d7d
@@ -782,6 +764,26 @@
519d7d
 			GNUTLS_CURVE_TO_BITS(GNUTLS_ECC_CURVE_SECP521R1),
519d7d
 			GNUTLS_DIG_SHA512);
519d7d
 
519d7d
+#ifdef ENABLE_NON_SUITEB_CURVES
519d7d
+		PK_KNOWN_TEST(GNUTLS_PK_EC, 0,
519d7d
+			      GNUTLS_CURVE_TO_BITS
519d7d
+			      (GNUTLS_ECC_CURVE_SECP192R1),
519d7d
+			      GNUTLS_DIG_SHA256, ecdsa_secp192r1_privkey,
519d7d
+			      ecdsa_secp192r1_sig);
519d7d
+		PK_TEST(GNUTLS_PK_EC, test_sig,
519d7d
+			GNUTLS_CURVE_TO_BITS(GNUTLS_ECC_CURVE_SECP192R1),
519d7d
+			GNUTLS_DIG_SHA256);
519d7d
+
519d7d
+		PK_KNOWN_TEST(GNUTLS_PK_EC, 0,
519d7d
+			      GNUTLS_CURVE_TO_BITS
519d7d
+			      (GNUTLS_ECC_CURVE_SECP224R1),
519d7d
+			      GNUTLS_DIG_SHA256, ecdsa_secp224r1_privkey,
519d7d
+			      ecdsa_secp224r1_sig);
519d7d
+		PK_TEST(GNUTLS_PK_EC, test_sig,
519d7d
+			GNUTLS_CURVE_TO_BITS(GNUTLS_ECC_CURVE_SECP224R1),
519d7d
+			GNUTLS_DIG_SHA256);
519d7d
+#endif
519d7d
+
519d7d
 		break;
519d7d
 
519d7d
 	default: