From bb8bbdcfaa89741321a00dc9a97e9d513eb037ff Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Sat, 20 Sep 2025 16:52:07 +0200 Subject: [PATCH] sslapitest.c: Skip test_ssl_trace() with FIPS providers older than 3.5 Reviewed-by: Paul Dale Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/28627) --- test/sslapitest.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/test/sslapitest.c b/test/sslapitest.c index b3e4c141495..9c51fb055db 100644 --- a/test/sslapitest.c +++ b/test/sslapitest.c @@ -13758,6 +13758,9 @@ static int test_ssl_trace(void) char *grouplist = "MLKEM512:MLKEM768:MLKEM1024:X25519MLKEM768:SecP256r1MLKEM768" ":SecP384r1MLKEM1024:secp521r1:secp384r1:secp256r1"; + if (!fips_provider_version_ge(libctx, 3, 5, 0)) + return TEST_skip("FIPS provider does not support MLKEM algorithms"); + if (!TEST_true(create_ssl_ctx_pair(libctx, TLS_server_method(), TLS_client_method(), TLS1_3_VERSION, TLS1_3_VERSION, -- 2.47.3