Commit fd2e2860a4 for openssl.org
commit fd2e2860a415c6febbb180ab4133dfa0e9d8d6a6
Author: Mounir IDRASSI <mounir.idrassi@idrix.fr>
Date: Thu Aug 13 15:00:13 2026 +0900
test: fix FIPS identity DRBG regression coverage
Use the configuration filename that was actually added. Set the random
configuration property to fips=yes so the existing RSA checks use a DRBG
from the renamed FIPS provider, rather than one from the default
provider.
Assisted-by: Codex:gpt-5.6-sol
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Nikola Pajkovsky <nikolap@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
MergeDate: Fri Aug 14 12:41:55 2026
(Merged from https://github.com/openssl/openssl/pull/32346)
diff --git a/test/fipsidentity.cnf b/test/fipsidentity.cnf
index 34bf5881d4..30b7775275 100644
--- a/test/fipsidentity.cnf
+++ b/test/fipsidentity.cnf
@@ -7,6 +7,7 @@ config_diagnostics = 1
[openssl_init]
providers = provider_sect
+random = random_sect
[provider_sect]
default = default_sect
@@ -17,3 +18,6 @@ activate = yes
[fips_sect]
identity = fips-identity
+
+[random_sect]
+properties = fips=yes
diff --git a/test/recipes/20-test_cli_fips.t b/test/recipes/20-test_cli_fips.t
index e4089cf03a..daf7368e91 100644
--- a/test/recipes/20-test_cli_fips.t
+++ b/test/recipes/20-test_cli_fips.t
@@ -31,7 +31,7 @@ plan tests => 13;
my $fipsmodule = bldtop_file('providers', platform->dso('fips'));
my $fipsconf = srctop_file("test", "fips-and-base.cnf");
my $defaultconf = srctop_file("test", "default.cnf");
-my $identityconf = srctop_file("test" ,"fips-identity.cnf");
+my $identityconf = srctop_file("test" ,"fipsidentity.cnf");
my $tbs_data = $fipsmodule;
my $bogus_data = $fipsconf;