In bsc#1209037, the test failed because it checks for any of these strings: /disabled for fips|disabled for FIPS|unknown option|Unknown digest|dgst: Unrecognized flag/ These strings were used in the past openssl versions but I think capturing the error output directly from openssl would be the best option as suggested by Marcus, probably add :unsupported:.