test: skip verify_recover regression with old FIPS providers

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
MergeDate: Wed May 27 11:46:41 2026
(Merged from https://github.com/openssl/openssl/pull/30917)

diff --git a/test/evp_extra_test.c b/test/evp_extra_test.c
index 0f805f6cec71ac8eeb06a26ce9cd802147e568aa..c1319a753f69a71c943ee671e51bd51b1567487e 100644 (file)
--- a/test/evp_extra_test.c
+++ b/test/evp_extra_test.c
@@ -4038,6 +4038,7 @@ err:
 
 static int test_RSA_verify_recover_rejects_short_buffer(void)
 {
+    int fipsver = 0;
     int ret = 0;
     int recovered_cap = 0;
     EVP_PKEY *pkey = NULL;
@@ -4050,6 +4051,13 @@ static int test_RSA_verify_recover_rejects_short_buffer(void)
     unsigned char digest[32];
     size_t i;
 
+    if (!TEST_int_ge(fipsver = fips_provider_version_match(testctx,
+                         "!3.0.0 !3.0.8 !3.0.9 !3.1.2"),
+            0))
+        goto done;
+    if (fipsver == 0)
+        return TEST_skip("Test skipped for old FIPS providers");
+
     for (i = 0; i < sizeof(digest); i++)
         digest[i] = (unsigned char)i;