Commit bbb301ae56 for openssl.org

commit bbb301ae5692f1b7ff197338a60745914a3833ce
Author: Tomas Mraz <tomas@openssl.foundation>
Date:   Mon Oct 26 15:14:59 2026 +0100

    test/quicapitest.c: Skip tests requiring X25519MLKEM768 with old fips providers

    Fixes: c69b5af10a75 "QUIC: resend the whole ClientHello after a Retry"
    Reviewed-by: Nikola Pajkovsky <nikolap@openssl.org>
    Reviewed-by: Milan Broz <mbroz@openssl.org>
    Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
    Merge-date: Mon Oct 26 14:45:36 2026
    Merged-from: https://github.com/openssl/openssl/pull/33404

diff --git a/test/quicapitest.c b/test/quicapitest.c
index 2f593fe010..e533dfde8e 100644
--- a/test/quicapitest.c
+++ b/test/quicapitest.c
@@ -4018,6 +4018,9 @@ static int test_quic_retry_split_client_hello(void)
     uint64_t cwnd = 0, init_cwnd;
     int testresult = 0, i, ret;

+    if (is_fips && fips_provider_version_match(libctx, "<3.5.0"))
+        return TEST_skip("FIPS provider does not support X25519MLKEM768");
+
     if (!TEST_ptr(sctx = create_server_ctx())
         || !TEST_ptr(cctx = create_client_ctx()))
         goto err;
@@ -4146,6 +4149,9 @@ static int test_quic_retry_after_version_neg(void)
     struct initial_version iv = { 0 };
     int testresult = 0, i, ret;

+    if (is_fips && fips_provider_version_match(libctx, "<3.5.0"))
+        return TEST_skip("FIPS provider does not support X25519MLKEM768");
+
     if (!TEST_ptr(sctx = create_server_ctx())
         || !TEST_ptr(cctx = create_client_ctx()))
         goto err;
@@ -4229,6 +4235,9 @@ static int test_quic_version_neg_split_client_hello(int idx)
     struct initial_version iv = { 0 };
     int testresult = 0, i, ret;

+    if (is_fips && fips_provider_version_match(libctx, "<3.5.0"))
+        return TEST_skip("FIPS provider does not support X25519MLKEM768");
+
     if (!TEST_ptr(sctx = create_server_ctx())
         || !TEST_ptr(cctx = create_client_ctx()))
         goto err;