This can be replicated by running docker buildx build -f examples/hydra.Dockerfile --target crypto_test . against the dockerfile in this PR
My understanding is that this test is expected to fail because openssl running in fips mode will refuse to act as a provider for ssl 3.0.x requests, but I don't see an obvious way to include its removal in configure-crypto-tests.sh or an obvious way to submit a PR for a patch golang version that is not the most recent patch version.
With some guidance on the above, I can submit a PR with a git patch to change this test to expect failure.