summaryrefslogtreecommitdiffstats
path: root/ssl/s3_srvr.c
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2011-05-19 18:22:16 +0000
committerDr. Stephen Henson <steve@openssl.org>2011-05-19 18:22:16 +0000
commit7043fa702fa102a45b102e11990b650360c35503 (patch)
tree77edd16724ed7b7312764e44b1f509d975470b76 /ssl/s3_srvr.c
parentf98d2e5cc13a42c39b2adb6771878ab8157e1fe4 (diff)
add FIPS support to ssl: doesn't do anything on this branch yet as there is no FIPS compilation support
Diffstat (limited to 'ssl/s3_srvr.c')
-rw-r--r--ssl/s3_srvr.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/ssl/s3_srvr.c b/ssl/s3_srvr.c
index 6300d5027a..9dc2a38750 100644
--- a/ssl/s3_srvr.c
+++ b/ssl/s3_srvr.c
@@ -1855,6 +1855,8 @@ int ssl3_send_server_key_exchange(SSL *s)
{
EVP_DigestInit_ex(&md_ctx,(num == 2)
?s->ctx->md5:s->ctx->sha1, NULL);
+ EVP_MD_CTX_set_flags(&md_ctx,
+ EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
EVP_DigestUpdate(&md_ctx,&(s->s3->client_random[0]),SSL3_RANDOM_SIZE);
EVP_DigestUpdate(&md_ctx,&(s->s3->server_random[0]),SSL3_RANDOM_SIZE);
EVP_DigestUpdate(&md_ctx,&(d[4]),n);