Commit a62c45948a for openssl.org

commit a62c45948a9da65a9c46dd79ac5f076f26accc42
Author: Bob Beck <beck@openssl.org>
Date:   Mon Aug 10 12:25:30 2026 -0600

    Fix provider compat test.

    The test added to catch invalid input will fail on older providers
    that will ignore the "1x" in the test and treat it as "1".

    Gate this test on 4.1.0

    Reviewed-by: Neil Horman <nhorman@openssl.org>
    Reviewed-by: Milan Broz <mbroz@openssl.org>
    MergeDate: Tue Aug 11 05:03:01 2026
    (Merged from https://github.com/openssl/openssl/pull/32272)

diff --git a/test/recipes/30-test_evp_data/evppkey_rsa_common.txt b/test/recipes/30-test_evp_data/evppkey_rsa_common.txt
index 58ac329afe..75dfbd3959 100644
--- a/test/recipes/30-test_evp_data/evppkey_rsa_common.txt
+++ b/test/recipes/30-test_evp_data/evppkey_rsa_common.txt
@@ -966,7 +966,10 @@ Input="0123456789ABCDEF0123456789ABCDEF"
 Output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
 Result = VERIFY_ERROR

-# Invalid numeric salt length string
+# Invalid numeric salt length string.  "1x" reaches the provider verbatim as
+# the OSSL_SIGNATURE_PARAM_PSS_SALTLEN UTF8 string and is rejected there, so
+# older FIPS providers, which converted it with atoi(), accept it as 1.
+FIPSversion = >=4.1.0
 Verify = RSA-2048-PUBLIC
 Ctrl = rsa_padding_mode:pss
 Ctrl = rsa_pss_saltlen:1x