Don't set default public key methods in FIPS mode so applications

can switch between modes.
This commit is contained in:
Dr. Stephen Henson
2011-06-20 19:41:13 +00:00
parent 45bf825066
commit 3a5b97b7f1
6 changed files with 29 additions and 17 deletions

View File

@@ -89,10 +89,12 @@ const DSA_METHOD *DSA_get_default_method(void)
{
#ifdef OPENSSL_FIPS
if (FIPS_mode())
default_DSA_method = FIPS_dsa_openssl();
return FIPS_dsa_openssl();
else
return DSA_OpenSSL();
#else
default_DSA_method = DSA_OpenSSL();
#endif
default_DSA_method = DSA_OpenSSL();
}
return default_DSA_method;
}