test: note that a default property query must be included for FIPS validity

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20079)

diff --git a/test/fips-and-base.cnf b/test/fips-and-base.cnf
index 494e96a87ef30d94d5cc6565cde446977af23a07..f233f830623bb1720e93ed48b800d2b03c562798 100644 (file)
--- a/test/fips-and-base.cnf
+++ b/test/fips-and-base.cnf
@@ -7,6 +7,12 @@ config_diagnostics = 1
 
 [openssl_init]
 providers = provider_sect
+# You MUST uncomment the following line to operate in a FIPS approved manner,
+# It is commented out here purely for testing purposes.
+#alg_section = evp_properties
+
+[evp_properties]
+default_properties = "fips=yes"
 
 [provider_sect]
 fips = fips_sect