With fips provider 3.0.0 skip tests related to explicit curves handling

[openssl.git] / test / recipes / 25-test_verify.t

diff --git a/test/recipes/25-test_verify.t b/test/recipes/25-test_verify.t
index d6d25759b5f8cbea532a0da2659addc10688775d..2bb77f2189d9b6ca809f1ddd99fedf396b2b5165 100644 (file)
--- a/test/recipes/25-test_verify.t
+++ b/test/recipes/25-test_verify.t
@@ -354,12 +354,18 @@ SKIP: {
 # Same as above but with base provider used for decoding
 SKIP: {
     my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);
-    skip "EC is not supported or FIPS is disabled", 3
-        if disabled("ec") || $no_fips;
-
     my $provconf = srctop_file("test", "fips-and-base.cnf");
     my $provpath = bldtop_dir("providers");
     my @prov = ("-provider-path", $provpath);
+
+    skip "EC is not supported or FIPS is disabled", 3
+        if disabled("ec") || $no_fips;
+
+    run(test(["fips_version_test", "-config", $provconf, ">3.0.0"]),
+             capture => 1, statusvar => \my $exit);
+    skip "FIPS provider version is too old", 3
+        if !$exit;
+
     $ENV{OPENSSL_CONF} = $provconf;
 
     ok(!verify("ee-cert-ec-explicit", "", ["root-cert"],