Commit f6eed8337b for openssl.org

commit f6eed8337b139f658c10260e624ac6f881deae53
Author: Tomas Mraz <tomas@openssl.foundation>
Date:   Thu Sep 24 09:55:16 2026 +0200

    sslapitest.c: ML-KEM-512 hybrids are not supported by old fips providers

    Reviewed-by: Jakub Zelenka <jakub.zelenka@openssl.foundation>
    Reviewed-by: Milan Broz <mbroz@openssl.org>
    Merge-date: Thu Sep 24 08:52:43 2026
    Merged-from: https://github.com/openssl/openssl/pull/32970

diff --git a/test/sslapitest.c b/test/sslapitest.c
index 215c841958..b07bc3b955 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -7100,6 +7100,10 @@ static int test_key_exchange(int idx)
         && ((idx >= 12 && idx <= 20) || idx == 23))
         return TEST_skip("ML-KEM not supported in this version of fips provider");

+    if (is_fips && fips_provider_version_lt(libctx, 4, 2, 0)
+        && (idx == 16 || idx == 18))
+        return TEST_skip("ML-KEM-512 hybrids not supported in this version of fips provider");
+
     if (!TEST_true(create_ssl_ctx_pair(libctx, TLS_server_method(),
             TLS_client_method(), TLS1_VERSION,
             max_version, &sctx, &cctx, cert,