PYTHON-5275 Fix handlig of FIPS build

Author: blink1073

.evergreen/config.yml

@@ -67,7 +67,7 @@ functions:
         binary: bash
         working_dir: "src"
         include_expansions_in_env: [VERSION, TOPOLOGY, AUTH, SSL, ORCHESTRATION_FILE, PYTHON_BINARY, PYTHON_VERSION,
-          STORAGE_ENGINE, REQUIRE_API_VERSION, DRIVERS_TOOLS, TEST_CRYPT_SHARED, AUTH_AWS, LOAD_BALANCER, LOCAL_ATLAS]
+          STORAGE_ENGINE, REQUIRE_API_VERSION, DRIVERS_TOOLS, TEST_CRYPT_SHARED, AUTH_AWS, LOAD_BALANCER, LOCAL_ATLAS, NO_EXT]
         args: [.evergreen/just.sh, run-server, "${TEST_NAME}"]
     - command: expansions.update
       params:
@@ -89,7 +89,7 @@ functions:
         include_expansions_in_env: [AUTH, SSL, AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,
           AWS_SESSION_TOKEN, COVERAGE, PYTHON_BINARY, LIBMONGOCRYPT_URL, MONGODB_URI, PYTHON_VERSION,
           DISABLE_TEST_COMMANDS, GREEN_FRAMEWORK, NO_EXT, COMPRESSORS, MONGODB_API_VERSION, DEBUG_LOG,
-          ORCHESTRATION_FILE, OCSP_SERVER_TYPE, VERSION]
+          ORCHESTRATION_FILE, OCSP_SERVER_TYPE, VERSION, REQUIRE_FIPS]
         binary: bash
         working_dir: "src"
         args: [.evergreen/just.sh, setup-tests, "${TEST_NAME}", "${SUB_TEST_NAME}"]

.evergreen/scripts/setup_tests.py

@@ -33,6 +33,7 @@
     "DEBUG_LOG",
     "PYTHON_BINARY",
     "PYTHON_VERSION",
+    "REQUIRE_FIPS",
 ]
 
 # Map the test name to test extra.

test/__init__.py

@@ -389,6 +389,8 @@ def fips_enabled(self):
             self._fips_enabled = True
         except (subprocess.SubprocessError, FileNotFoundError):
             self._fips_enabled = False
+        if os.environ.get("REQUIRE_FIPS") and not self._fips_enabled:
+            raise RuntimeError("Expected FIPS to be enabled")
         return self._fips_enabled
 
     def check_auth_type(self, auth_type):

test/asynchronous/__init__.py

@@ -391,6 +391,8 @@ def fips_enabled(self):
             self._fips_enabled = True
         except (subprocess.SubprocessError, FileNotFoundError):
             self._fips_enabled = False
+        if os.environ.get("REQUIRE_FIPS") and not self._fips_enabled:
+            raise RuntimeError("Expected FIPS to be enabled")
         return self._fips_enabled
 
     def check_auth_type(self, auth_type):