FIPS mode changes to make RNG compile (this will need updating later as we

need a whole new PRNG for FIPS).

1. avoid use of ERR_peek().

2. If compiling with FIPS use small FIPS EVP and disable ENGINE
This commit is contained in:
Dr. Stephen Henson
2011-01-26 14:52:04 +00:00
parent 1ab2f7f1cb
commit 4ead4e5241
2 changed files with 21 additions and 16 deletions

View File

@@ -60,6 +60,12 @@
#include <time.h>
#include "cryptlib.h"
#include <openssl/rand.h>
#ifdef OPENSSL_FIPSCANISTER
#define OPENSSL_NO_ENGINE
#include <openssl/fips.h>
#endif
#ifndef OPENSSL_NO_ENGINE
#include <openssl/engine.h>
#endif