cmd/dist: test GOFIPS140=latest rather than just the GODEBUG

GOFIPS140=latest turns on the GODEBUG by default, and it's otherwise
untested.

Change-Id: I6a6a4656ff7ad313ce2c61ee4144ad2858bd148c
Reviewed-on: https://go-review.googlesource.com/c/go/+/648819
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Auto-Submit: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Ian Lance Taylor <iant@google.com>
Reviewed-by: Daniel McCarney <daniel@binaryparadox.net>
Reviewed-by: Roland Shoemaker <roland@golang.org>

diff --git a/src/cmd/dist/test.go b/src/cmd/dist/test.go
index 005e1da86a1dc22687a83129f1d1a68dcb1a0e17..b137c7db7990bd37f9614b74d93cdfecc9584ab8 100644 (file)
--- a/src/cmd/dist/test.go
+++ b/src/cmd/dist/test.go
@@ -712,9 +712,9 @@ func (t *tester) registerTests() {
        // Check that all crypto packages compile (and test correctly, in longmode) with fips.
        if t.fipsSupported() {
                // Test standard crypto packages with fips140=on.
-               t.registerTest("GODEBUG=fips140=on go test crypto/...", &goTest{
+               t.registerTest("GOFIPS140=latest go test crypto/...", &goTest{
                        variant: "gofips140",
-                       env:     []string{"GODEBUG=fips140=on"},
+                       env:     []string{"GOFIPS140=latest"},
                        pkg:     "crypto/...",
                })