From fe923a59775a541831fe4b24c1c357763f0f513a Mon Sep 17 00:00:00 2001
From: mosaic-coder <coder@fleet.mosaicstack.dev>
Date: Sat, 25 Jul 2026 22:34:20 -0500
Subject: [PATCH] =?UTF-8?q?fix(wake):=20B12=20beacon-HMAC=20test=20skips?=
 =?UTF-8?q?=20when=20openssl=20unavailable=20(mirror=20W3=20digest-HMAC=20?=
 =?UTF-8?q?guard)=20=E2=80=94=20CI-green?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 packages/mosaic/framework/tools/wake/test-wake-beacon.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/packages/mosaic/framework/tools/wake/test-wake-beacon.sh b/packages/mosaic/framework/tools/wake/test-wake-beacon.sh
index 13d39c02..b87dbe68 100755
--- a/packages/mosaic/framework/tools/wake/test-wake-beacon.sh
+++ b/packages/mosaic/framework/tools/wake/test-wake-beacon.sh
@@ -296,6 +296,9 @@ echo "== B11: staleness from monitor ingested_ts -> a far-future emit_ts STILL g
 ) && ok
 
 echo "== B12: HMAC-verify at record -> a spoofed (bad-sig) beacon is REJECTED =="
+if ! command -v openssl >/dev/null 2>&1; then
+  echo "SKIP: openssl not available" >&2
+else
 (
   H="$(fresh_home b12)"
   export WAKE_STATE_HOME="$H"
@@ -330,6 +333,7 @@ echo "== B12: HMAC-verify at record -> a spoofed (bad-sig) beacon is REJECTED ==
   grep -qF "test-beacon-hmac-key-do-not-echo" "$BEACON" && fail_msg "B12: beacon.sh must NOT inline the HMAC key"
   true
 ) && ok
+fi
 
 echo
 if [ -s "$FAILFILE" ]; then