1
0
Эх сурвалжийг харах

Fix testGenerateAndSignMetadata in FIPS mode (#54115)

BC provider throws different error message on signature
validation failure
Ioannis Kakavas 5 жил өмнө
parent
commit
fa7603822a

+ 5 - 1
x-pack/plugin/identity-provider/src/test/java/org/elasticsearch/xpack/idp/saml/idp/SamlMetadataGeneratorTests.java

@@ -126,7 +126,11 @@ public class SamlMetadataGeneratorTests extends IdpSamlTestCase {
         //no exception thrown
         SignatureException e = expectThrows(SignatureException.class,
             () -> SignatureValidator.validate(signature, readCredentials("RSA", 2048)));
-        assertThat(e.getMessage(), containsString("Unable to evaluate key against signature"));
+        if (inFipsJvm()) {
+            assertThat(e.getMessage(), containsString("Signature cryptographic validation not successful"));
+        } else {
+            assertThat(e.getMessage(), containsString("Unable to evaluate key against signature"));
+        }
     }
 
 }