Remove some unnecessary OPENSSL_FIPS references
FIPS_mode() exists in all versions of OpenSSL but always returns 0 if OpenSSL is not FIPS capable. Reviewed-by: Tim Hudson <tjh@openssl.org>
This commit is contained in:
@@ -630,13 +630,11 @@ int ssl3_digest_cached_records(SSL *s)
|
||||
if ((mask & ssl_get_algorithm2(s)) && md)
|
||||
{
|
||||
s->s3->handshake_dgst[i]=EVP_MD_CTX_create();
|
||||
#ifdef OPENSSL_FIPS
|
||||
if (EVP_MD_nid(md) == NID_md5)
|
||||
{
|
||||
EVP_MD_CTX_set_flags(s->s3->handshake_dgst[i],
|
||||
EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
|
||||
}
|
||||
#endif
|
||||
EVP_DigestInit_ex(s->s3->handshake_dgst[i],md,NULL);
|
||||
EVP_DigestUpdate(s->s3->handshake_dgst[i],hdata,hdatalen);
|
||||
}
|
||||
|
Reference in New Issue
Block a user