From d8523bf16205399363604c8fc90256791ad8c019 Mon Sep 17 00:00:00 2001
From: Pauli <pauli@openssl.org>
Date: Mon, 23 Jan 2023 09:52:17 +1100
Subject: [PATCH] test: note that a default property query must be included for
 FIPS validity

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20079)
---
 test/fips-and-base.cnf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/test/fips-and-base.cnf b/test/fips-and-base.cnf
index 494e96a87e..f233f83062 100644
--- a/test/fips-and-base.cnf
+++ b/test/fips-and-base.cnf
@@ -7,6 +7,12 @@ config_diagnostics = 1
 
 [openssl_init]
 providers = provider_sect
+# You MUST uncomment the following line to operate in a FIPS approved manner,
+# It is commented out here purely for testing purposes.
+#alg_section = evp_properties
+
+[evp_properties]
+default_properties = "fips=yes"
 
 [provider_sect]
 fips = fips_sect