From: Pauli <ppzgs1@gmail.com>
Date: Mon, 7 Oct 2024 23:38:26 +0000 (+1100)
Subject: evp_libctx_test: fix provider compat CI regression
X-Git-Tag: openssl-3.5.0-alpha1~1034
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=73e720c3a5164d28ffbcbf06aa88ecdfd8b2fe7f;p=thirdparty%2Fopenssl.git

evp_libctx_test: fix provider compat CI regression

The regression was introduced by #25522.

Fixes #25632

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25633)
---

diff --git a/test/evp_libctx_test.c b/test/evp_libctx_test.c
index 784e4a58b01..7e246efd800 100644
--- a/test/evp_libctx_test.c
+++ b/test/evp_libctx_test.c
@@ -604,14 +604,16 @@ static int kem_rsa_gen_recover(void)
           && TEST_mem_eq(unwrap, unwraplen, secret, secretlen);
 
     /* Test that providing a too short unwrapped/ctlen fails */
-    ctlen = 1;
-    if (!TEST_int_eq(EVP_PKEY_encapsulate(dctx, ct, &ctlen, secret,
-                                          &secretlen), 0))
-        ret = 0;
-    unwraplen = 1;
-    if (!TEST_int_eq(EVP_PKEY_decapsulate(rctx, unwrap, &unwraplen, ct,
-                                          ctlen), 0))
-        ret = 0;
+    if (fips_provider_version_match(libctx, ">=3.4.0")) {
+        ctlen = 1;
+        if (!TEST_int_eq(EVP_PKEY_encapsulate(dctx, ct, &ctlen, secret,
+                                              &secretlen), 0))
+            ret = 0;
+        unwraplen = 1;
+        if (!TEST_int_eq(EVP_PKEY_decapsulate(rctx, unwrap, &unwraplen, ct,
+                                              ctlen), 0))
+            ret = 0;
+    }
 
     EVP_PKEY_free(pub);
     EVP_PKEY_free(priv);