mirror of
https://github.com/keycloak/keycloak.git
synced 2026-01-09 23:12:06 -03:30
768cea1b82
* Add FIPS test suite to the new tests Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com> * Tweaks to FIPS suite in new test Signed-off-by: stianst <stianst@gmail.com> --------- Signed-off-by: Lukas Hanusovsky <lhanusov@redhat.com> Signed-off-by: stianst <stianst@gmail.com> Co-authored-by: stianst <stianst@gmail.com>
45 lines
1.6 KiB
Bash
Executable File
45 lines
1.6 KiB
Bash
Executable File
#!/bin/bash -x
|
|
|
|
rm -f /etc/system-fips
|
|
dnf install -y java-21-openjdk-devel
|
|
fips-mode-setup --enable --no-bootcfg
|
|
fips-mode-setup --is-enabled
|
|
if [ $? -ne 0 ]; then
|
|
exit 1
|
|
fi
|
|
STRICT_OPTIONS=""
|
|
TESTSUITE_NAME="FipsNonStrictTestSuite"
|
|
if [ "$1" = "strict" ]; then
|
|
STRICT_OPTIONS="-Dauth.server.fips.mode=strict -Dauth.server.supported.keystore.types=BCFKS -Dauth.server.keystore.type=bcfks -Dauth.server.supported.rsa.key.sizes=2048,3072,4096"
|
|
TESTSUITE_NAME="FipsStrictTestSuite"
|
|
fi
|
|
echo "STRICT_OPTIONS: $STRICT_OPTIONS"
|
|
TESTS=`testsuite/integration-arquillian/tests/base/testsuites/suite.sh fips`
|
|
echo "Tests: $TESTS"
|
|
export JAVA_HOME=/etc/alternatives/java_sdk_21
|
|
set -o pipefail
|
|
|
|
# Build adapter distributions
|
|
./mvnw install -DskipTests -f distribution/pom.xml
|
|
if [ $? -ne 0 ]; then
|
|
exit 1
|
|
fi
|
|
|
|
# Build app servers
|
|
./mvnw install -DskipTests -Pbuild-app-servers -f testsuite/integration-arquillian/servers/app-server/pom.xml
|
|
if [ $? -ne 0 ]; then
|
|
exit 1
|
|
fi
|
|
|
|
# Prepare Quarkus distribution with BCFIPS
|
|
./mvnw install -e -pl testsuite/integration-arquillian/servers/auth-server/quarkus -Pauth-server-quarkus,auth-server-fips140-2
|
|
if [ $? -ne 0 ]; then
|
|
exit 1
|
|
fi
|
|
|
|
# Profile app-server-wildfly needs to be explicitly set for FIPS tests
|
|
./mvnw test -Dsurefire.rerunFailingTestsCount=$SUREFIRE_RERUN_FAILING_COUNT -nsu -B -Pauth-server-quarkus,auth-server-fips140-2,app-server-wildfly -Dcom.redhat.fips=false $STRICT_OPTIONS -Dtest=$TESTS -pl testsuite/integration-arquillian/tests/base 2>&1 | misc/log/trimmer.sh
|
|
|
|
# New Base Tests
|
|
./mvnw package -nsu -B -Dcom.redhat.fips=false -Dtest=$TESTSUITE_NAME -pl tests/base
|