Skip to content

Test failures with FIPS enabled #48379

Closed as not planned
Closed as not planned
Test failures with FIPS enabled#48379
Labels
cryptoIssues and PRs related to the crypto subsystem.staleIssues and PRs marked stale due to inactivity and scheduled for automatic closure.testIssues and PRs related to Node.js core tests and test infrastructure.

Description

@richardlau
richardlau
opened on Jun 7, 2023

Background

Previously we used to have a CI configuration for testing Node.js with FIPS enabled back when we were using OpenSSL 1.0.2. We stopped in Node.js 10.x when we moved to OpenSSL 1.1.x as there was no upstream OpenSSL support for FIPS in that version. With OpenSSL 3, FIPS is back, this time as an OpenSSL 3 provider.

I've started work on re-adding a FIPS enabled configuration to our CI. For now this is in a temporary separate job as there are test failures.

richardlau-node-test-commit-linux-containered is based on node-test-commit-linux-containered with extra configurations, one of which, ubuntu2204_sharedlibs_openssl30fips_x64, is for FIPS enablement with OpenSSL 3. I've put together a slimmed down version of the container we're using in https://github.com/richardlau/ubuntu2204_fips for replication outside of the CI.

List of failing tests with FIPS enabled

e.g. https://ci.nodejs.org/job/richardlau-node-test-commit-linux-containered/14/nodes=ubuntu2204_sharedlibs_openssl30fips_x64
(on a929522)

cc @nodejs/crypto

Activity

  1. richardlau
    added
    cryptoIssues and PRs related to the crypto subsystem.
    testIssues and PRs related to Node.js core tests and test infrastructure.
    on Jun 7, 2023
  2. nodejs-github-bot
    added a commit that references this issue on Jun 12, 2023

    crypto: remove OPENSSL_FIPS guard for OpenSSL 3

    8d651ce
  3. RafaelGSS
    added a commit that references this issue on Jul 3, 2023

    crypto: remove OPENSSL_FIPS guard for OpenSSL 3

    89aaf16
  4. Ceres6
    added 2 commits that reference this issue on Aug 14, 2023

    crypto: remove OPENSSL_FIPS guard for OpenSSL 3

    2cd03a4

    crypto: remove OPENSSL_FIPS guard for OpenSSL 3

    dcdf4cb
  5. ruyadorno
    added 2 commits that reference this issue on Sep 8, 2023

    crypto: remove OPENSSL_FIPS guard for OpenSSL 3

    aa08460

    crypto: remove OPENSSL_FIPS guard for OpenSSL 3

    b2bc839

  6. github-actions commented on May 31, 2026

    @github-actions
    github-actionsbot
    on May 31, 2026 – with GitHub Actions
    Contributor

    This issue has been marked as stale due to 210 days of inactivity.
    It will be automatically closed in 30 days if no further activity occurs. If this is still relevant, please leave a comment or update it to keep it open.

  7. github-actions
    added
    staleIssues and PRs marked stale due to inactivity and scheduled for automatic closure.
    on May 31, 2026

  8. github-actions commented on Jul 1, 2026

    @github-actions
    github-actionsbot
    on Jul 1, 2026 – with GitHub Actions
    Contributor

    This issue has been automatically closed after 30 days of inactivity following its stale status (no activity for a total of 240 days).
    If this is still relevant, feel free to reopen it or leave a comment with additional details so we can continue the discussion.

  9. github-actions
    closed this as not plannedon Jul 1, 2026
  10. nodejs-github-bot
    added 2 commits that reference this issue on Aug 5, 2026

    test: update tests to run with OpenSSL >= 3.0 FIPS mode

    45550ee

    tools: add an OpenSSL FIPS build to test-shared.yml

    dc7838c
  11. aduh95
    added 2 commits that reference this issue on Aug 13, 2026

    tools: add an OpenSSL FIPS build to test-shared.yml

    5bc6133

    test: update tests to run with OpenSSL >= 3.0 FIPS mode

    732c48b
  12. aduh95
    added 2 commits that reference this issue on Aug 25, 2026

    tools: add an OpenSSL FIPS build to test-shared.yml

    0e1a99a

    test: update tests to run with OpenSSL >= 3.0 FIPS mode

    fd7e904
  13. aduh95
    added a commit that references this issue on Sep 25, 2026

    test: update tests to run with OpenSSL >= 3.0 FIPS mode

    810a6b0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    cryptoIssues and PRs related to the crypto subsystem.staleIssues and PRs marked stale due to inactivity and scheduled for automatic closure.testIssues and PRs related to Node.js core tests and test infrastructure.

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions