From d03874662c7f9dd3f169fdfbf4da4ace3f4ccb46 Mon Sep 17 00:00:00 2001
From: Filip Skokan <panva.ip@gmail.com>
Date: Wed, 11 Nov 2026 13:36:30 +0100
Subject: [PATCH] test: fix X.509 generation with OpenSSL 4.1 FIPS

Use a passphrase that meets the FIPS provider's minimum for PBKDF2.

Signed-off-by: Filip Skokan <panva.ip@gmail.com>
---
 test/parallel/test-crypto-x509-generate.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/test/parallel/test-crypto-x509-generate.js b/test/parallel/test-crypto-x509-generate.js
index 9f47f86bafe0..98e9419db66e 100644
--- a/test/parallel/test-crypto-x509-generate.js
+++ b/test/parallel/test-crypto-x509-generate.js
@@ -389,7 +389,7 @@ for (const [type, options] of [
 
 {
   const keys = generateKeyPairSync('ec', { namedCurve: 'P-256' });
-  const passphrase = 'secret';
+  const passphrase = 'top secret';
   const encryptedPrivateKey = keys.privateKey.export({
     type: 'pkcs8',
     format: 'pem',