Bug 1173595

Description of problem:
Internal test suite, which is executed during srpm rebuild, fails on systems in FIPS-140-2 mode.

Version-Release number of selected component (if applicable):
gnutls-3.3.8-11.el7

How reproducible:
always

Steps to Reproduce:
1. try to build package from source rpm on FIPS enabled system

Actual results:
...
FAIL: set_pkcs12_cred
...
============================================================================
Testsuite summary for GnuTLS 3.3.8
============================================================================
# TOTAL: 86
# PASS:  79
# SKIP:  6
# XFAIL: 0
# FAIL:  1
# XPASS: 0
# ERROR: 0
...

From the test log:
# cat set_pkcs12_cred.log 
x509_pkcs12 failed -50: The request is invalid.

More verbose output:
# GNUTLS_DEBUG_LEVEL=99 ./set_pkcs12_cred
gnutls[2]: Enabled GnuTLS logging...
gnutls[2]: FIPS140-2 mode enabled
gnutls[2]: FIPS140-2 mode: 1
gnutls[2]: AES-128-CBC self check succeeded
gnutls[2]: Intel SSSE3 was detected
gnutls[2]: Intel AES accelerator was detected
gnutls[2]: Intel GCM accelerator was detected
gnutls[2]: 3DES-CBC self check succeeded
gnutls[2]: AES-256-GCM self check succeeded
gnutls[2]: MAC-SHA1 self check succeeded
gnutls[2]: MAC-SHA224 self check succeeded
gnutls[2]: MAC-SHA256 self check succeeded
gnutls[2]: MAC-SHA384 self check succeeded
gnutls[2]: MAC-SHA512 self check succeeded
gnutls[3]: ASSERT: pk.c:717
gnutls[3]: ASSERT: gnutls_pubkey.c:1959
gnutls[3]: ASSERT: gnutls_pubkey.c:1569
gnutls[2]: RSA-2048-known-sig self test succeeded
gnutls[3]: ASSERT: x509_b64.c:299
gnutls[9]: Could not find '-----BEGIN RSA PRIVATE KEY'
gnutls[3]: ASSERT: pk.c:685
gnutls[3]: ASSERT: gnutls_pubkey.c:1970
gnutls[3]: ASSERT: gnutls_pubkey.c:1569
gnutls[2]: DSA-2048-known-sig self test succeeded
gnutls[2]: ECDH self test succeeded
gnutls[2]: DH self test succeeded
gnutls[2]: DRBG-AES self test succeeded
gnutls[2]: Loading: /tmp/tmp.ZJ0dEADSqr/rpmroot/BUILD/gnutls-3.3.8/lib/.libs/libgnutls.so.28
gnutls[2]: Successfully verified library MAC for libgnutls.so.28
gnutls[2]: Loading: /lib64/libnettle.so.4
gnutls[2]: Successfully verified library MAC for libnettle.so.4
gnutls[2]: Loading: /lib64/libhogweed.so.2
gnutls[2]: Successfully verified library MAC for libhogweed.so.2
gnutls[2]: Loading: /lib64/libgmp.so.10
gnutls[2]: Could not open /lib64/.libgmp.so.10.hmac for MAC testing: Error while reading file.
gnutls[2]: Successfully verified library MAC for libgmp.so.10
<9>| salt.size: 8
<9>| iterationCount: 2048
<3>| ASSERT: cipher.c:270
<3>| ASSERT: gnutls_cipher_int.c:103
<3>| ASSERT: privkey_pkcs8.c:1723
<3>| ASSERT: privkey_pkcs8.c:2306
<3>| ASSERT: pkcs12_bag.c:680
<3>| ASSERT: pkcs12.c:1489
<3>| ASSERT: gnutls_x509.c:1832
x509_pkcs12 failed -50: The request is invalid.

Expected results:
test suite passes, package is built correctly

Additional info:
I did some debugging and found out that the problem is caused by old non-FIPS-compliant algorithms used in example files, e.g. PKCS12_RC2_40_SHA1 in client.p12.