Add test to check the no-digests quirk

Signed-off-by: Simo Sorce <[email protected]>

tests/openssl.cnf.in

@@ -27,6 +27,7 @@ pkcs11-module-token-pin = file:@PINFILE@
 #pkcs11-module-encode-provider-uri-to-pem
 #pkcs11-module-allow-export
 #pkcs11-module-load-behavior
+#pkcs11-module-block-operations
 ##QUIRKS
 activate = 1
 

tests/tdigest

@@ -12,5 +12,32 @@ OPENSSL_CONF=${OPENSSL_CONF}.early_load
 
 title PARA "Test Digests support"
 $CHECKER "${TESTBLDDIR}/tdigests"
+echo "PASSED"
+
+# Ensure failure if the digest operations are blocked
+sed "s/#pkcs11-module-block-operations/pkcs11-module-block-operations = digest/" \
+    "${OPENSSL_CONF}" > "${OPENSSL_CONF}.no_digests"
+OPENSSL_CONF=${OPENSSL_CONF}.no_digests
+
+title PARA "Test Digests Blocked"
+FAIL=0
+OUT=$(eval "${TESTBLDDIR}/tdigests" 2>&1) || FAIL=1
+if [ $FAIL -ne 0 ]; then
+    echo "$OUT" | grep "No digest available" || FAIL=2
+fi
+if [ $FAIL -eq 0 ]; then
+    echo "Digests test should have failed"
+    exit 1
+fi
+if [ $FAIL -eq 1 ]; then
+    echo "Digest operations failed as expected"
+fi
+if [ $FAIL -eq 2 ]; then
+    echo "Digest operations failed but not as expected"
+    echo "output:\n---"
+    echo "$OUT"
+    echo "---"
+    exit 1
+fi
 
 exit 0