generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Make TLSv1 work in FIPS mode.

Browse Source
This commit is contained in:
Ben Laurie
2003-09-13 17:03:54 +00:00
parent b09c9a91cb
commit c45c8f3f1c
12 changed files with 221 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
ssl/ssl_lib.c
View File

@@ -122,6 +122,7 @@
#include <openssl/lhash.h>
#include <openssl/x509v3.h>
#include "cryptlib.h"
#include "../fips/fips_locl.h"
const char *SSL_version_str=OPENSSL_VERSION_TEXT;
@@ -2152,7 +2153,18 @@ int SSL_CTX_set_default_verify_paths(SSL_CTX *ctx)
int SSL_CTX_load_verify_locations(SSL_CTX *ctx, const char *CAfile,
const char *CApath)
{
return(X509_STORE_load_locations(ctx->cert_store,CAfile,CApath));
int r;
#ifdef OPENSSL_FIPS
if(ctx->method->version == TLS1_VERSION)
FIPS_allow_md5(1);
#endif
r=X509_STORE_load_locations(ctx->cert_store,CAfile,CApath);
#ifdef OPENSSL_FIPS
if(ctx->method->version == TLS1_VERSION)
FIPS_allow_md5(0);
#endif
return r;
}
#endif