Issue #6938 has been updated by MartinBosslet (Martin Bosslet).


> Why TEST_KEY_DH1024 in test/openssl/utils.rb doesn't use cache?

Unfortunately DH doesn't allow serialization of the private exponent out of the box like the other PKeys do. But 1024 bits generation is eating up a lot of time, way too much for tests IMO. And what's worse, I saw that the "test-all" target for one run on rubyci timed out. I'm currently looking for a way to still be able to serialize DH keys including the private exponent to solve this. 
----------------------------------------
Bug #6938: [PATCH] Increase DH key size to fix test suite in FIPS mode
https://bugs.ruby-lang.org/issues/6938#change-29138

Author: vo.x (Vit Ondruch)
Status: Closed
Priority: Normal
Assignee: MartinBosslet (Martin Bosslet)
Category: 
Target version: 
ruby -v: ruby 2.0.0dev


In FIPS mode, DH refuses to generate or use keys with modulus smaller than 1024 bits. This patch increases the key size to make the test suite pass.


-- 
http://bugs.ruby-lang.org/