Commit 46040a2988 for openssl.org

commit 46040a298884aba27617f9697a70ff725d10fd52
Author: Jakub Zelenka <jakub.zelenka@openssl.foundation>
Date:   Mon Jul 6 11:30:17 2026 +0200

    quic: do not hard fail mfail test for old fips providers

    This is because ML-KEM change from #31432 is not backported there.

    Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
    Reviewed-by: Paul Dale <paul.dale@oracle.com>
    Reviewed-by: Neil Horman <nhorman@openssl.org>
    MergeDate: Tue Jul  7 16:36:07 2026
    (Merged from https://github.com/openssl/openssl/pull/31870)

diff --git a/test/quicapitest.c b/test/quicapitest.c
index 271778f6b3..dd574b56fc 100644
--- a/test/quicapitest.c
+++ b/test/quicapitest.c
@@ -3643,7 +3643,9 @@ static int test_quic_handshake_multipkt_mfail(void)
         quic_advance_time(clientssl, serverssl);
     }
     if (!TEST_int_lt(i, 10)) {
-        ret = -1;
+        ret = is_fips && fips_provider_version_match(libctx, ">=3.5.0 <4.1.0")
+            ? 0
+            : -1;
         goto err;
     }