From 0285160ffa3b8c2b5491222243042593808298c4 Mon Sep 17 00:00:00 2001
From: Tomas Mraz <tomas@openssl.org>
Date: Wed, 29 May 2024 16:32:19 +0200
Subject: [PATCH] Skip newly added blocked OAEP SHAKE testcases with old fips
 providers

Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24529)
---
 test/recipes/30-test_evp_data/evppkey_rsa_common.txt | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/test/recipes/30-test_evp_data/evppkey_rsa_common.txt b/test/recipes/30-test_evp_data/evppkey_rsa_common.txt
index 9fa4094bcc..9cc007ad7b 100644
--- a/test/recipes/30-test_evp_data/evppkey_rsa_common.txt
+++ b/test/recipes/30-test_evp_data/evppkey_rsa_common.txt
@@ -330,6 +330,7 @@ Output = "Hello World"
 
 # Decrypt OAEP SHAKE MGF1
 Availablein = fips
+FIPSversion = >=3.4.0
 Decrypt = RSA-2048
 Ctrl = rsa_padding_mode:oaep
 Ctrl = rsa_mgf1_md:shake128
@@ -338,6 +339,7 @@ Result = KEYOP_ERROR
 
 # Decrypt OAEP SHAKE MD
 Availablein = fips
+FIPSversion = >=3.4.0
 Decrypt = RSA-2048
 Ctrl = rsa_padding_mode:oaep
 Ctrl = rsa_oaep_md:shake128