if test $IGNORE_FLAKY_TESTS = "true"
then
  FLAKY_TESTS_MODE=dontcare
else
  FLAKY_TESTS_MODE=run
fi

echo FLAKY_TESTS_MODE=$FLAKY_TESTS_MODE

# individual steps that match "make run-ci" used in regular runs with
# the additon of the --openssl-fips option
# and validattion that we built in FIPS capable mode

# build in FIPS capabale mode, specifying the directory that we installed
# the fipscanister files into in the earlier fipscanister build step
export MAKE=make
PYTHON=python ./configure --openssl-fips=$WORKSPACE/fipscanisterdir
PYTHON=python FLAKY_TESTS=$FLAKY_TESTS_MODE $MAKE -j $(getconf _NPROCESSORS_ONLN)

# validate using process.versions output that we actually built in FIPS capable
# mode.  We expect to see "-fips" in the openssl version.  For example:
# "openssl: '1.0.2d-fips"
export OPENSSL_VERSION="`out/Release/node -pe process.versions |grep openssl`"
echo "Openssl Version: $OPENSSL_VERSION"
export FIPS_CAPABLE="`echo "$OPENSSL_VERSION" |grep fips`"
if [ X"$FIPS_CAPABLE" = X"" ]; then
  echo "Not built as FIPS capable, exiting"
  exit -1
fi

NODE_VERSION=`out/Release/node --version |awk -F "." '{print $1}' | sed 's/v//g'`

# This either runs with FIPS on in 4.X or 5.X or with FIPS off in 6.X or later (as the default was changed)
NODE_TEST_DIR=${HOME}/node-tmp PYTHON=python FLAKY_TESTS=$FLAKY_TESTS_MODE $MAKE test-ci -j $(getconf _NPROCESSORS_ONLN)
mv test.tap test-fips-base.tap

# now run the tests with fips on if we are a version later than 5.X
if [ "$NODE_VERSION" -gt "5" ]; then
  NODE_TEST_DIR=${HOME}/node-tmp PYTHON=python FLAKY_TESTS=$FLAKY_TESTS_MODE TEST_CI_ARGS="--node-args --enable-fips" $MAKE test-ci -j $(getconf _NPROCESSORS_ONLN)
  mv test.tap test-fips-on.tap
fi