[fips140][configurablehttpprovider.TestFunctionalityDownloadFileHTTPS] Skip test if GODEBUG=fips140=only is set

confmap/go.mod

@@ -10,6 +10,7 @@ require (
 	github.com/knadh/koanf/v2 v2.3.0
 	github.com/stretchr/testify v1.11.1
 	go.opentelemetry.io/collector/featuregate v1.44.0
+	go.opentelemetry.io/collector/internal/testutil v0.0.0-00010101000000-000000000000
 	go.uber.org/goleak v1.3.0
 	go.uber.org/multierr v1.11.0
 	go.uber.org/zap v1.27.0
@@ -30,4 +31,7 @@ retract (
 	v0.69.0 // Release failed, use v0.69.1
 )
 
-replace go.opentelemetry.io/collector/featuregate => ../featuregate
+replace (
+	go.opentelemetry.io/collector/featuregate => ../featuregate
+	go.opentelemetry.io/collector/internal/testutil => ../internal/testutil
+)

confmap/provider/internal/configurablehttpprovider/provider_test.go

@@ -25,6 +25,7 @@ import (
 
 	"go.opentelemetry.io/collector/confmap"
 	"go.opentelemetry.io/collector/confmap/confmaptest"
+	"go.opentelemetry.io/collector/internal/testutil"
 )
 
 func newConfigurableHTTPProvider(scheme SchemeType, set confmap.ProviderSettings) *provider {
@@ -51,6 +52,7 @@ func answerGet(w http.ResponseWriter, _ *http.Request) {
 // Generate a self signed certificate specific for the tests. Based on
 // https://go.dev/src/crypto/tls/generate_cert.go
 func generateCertificate(t *testing.T, hostname string) (cert, key string, err error) {
+	testutil.SkipIfFIPSOnly(t, "x509.CreateCertificate uses SHA-1")
 	priv, err := rsa.GenerateKey(rand.Reader, 2048)
 	if err != nil {
 		return "", "", fmt.Errorf("Failed to generate private key: %w", err)

internal/testutil/Makefile

@@ -0,0 +1 @@
+include ../../Makefile.Common

internal/testutil/README.md

@@ -0,0 +1,4 @@
+## Test Utilities
+
+The `go.opentelemetry.io/collector/internal/testutil` module provides utility functions, etc. for use by tests in other 
+OpenTelemetry Collector modules.

internal/testutil/fips.go

@@ -0,0 +1,21 @@
+// Copyright The OpenTelemetry Authors
+// SPDX-License-Identifier: Apache-2.0
+
+package testutil // import "go.opentelemetry.io/collector/internal/testutil"
+
+import (
+	"os"
+	"strings"
+	"testing"
+)
+
+// SkipIfFIPSOnly will mark the passed test as skipped if GODEBUG=fips140=only is detected.
+// If GODEBUG=fips140=on, go may call non-compliant algorithms and the test does not need to be skipped.
+func SkipIfFIPSOnly(t *testing.T, msg string) {
+	// NOTE: This only checks env var; at the time of writing fips140 can only be set via env
+	// other GODEBUG settings can be set via embedded comments or in go.mod, we may need to account for this in the future.
+	s := os.Getenv("GODEBUG")
+	if strings.Contains(s, "fips140=only") {
+		t.Skip("GODEBUG=fips140=only detected, skipping test:", msg)
+	}
+}

internal/testutil/go.mod

@@ -0,0 +1,15 @@
+module go.opentelemetry.io/collector/internal/testutil
+
+go 1.24.0
+
+require (
+	github.com/stretchr/testify v1.11.1
+	go.uber.org/goleak v1.3.0
+)
+
+require (
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/kr/text v0.2.0 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
+)