you want to test both positive and negative results of a rspec test, because a false negative result is a fairly high risk, such as in a case where the broken code fails silently
Turning on FIPS mode failed: fingerprint does not match… a collection of research about getting an old version to work and links to things that helped along the way.