summaryrefslogtreecommitdiffstats
path: root/ssl
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2011-06-14 15:25:41 +0000
committerDr. Stephen Henson <steve@openssl.org>2011-06-14 15:25:41 +0000
commit4bea454021de916722415968c590ed02711fc986 (patch)
treeb322381c4a9f9f8d5bc19e8856917289ef022da3 /ssl
parent8bfd0ae4c405b6dc5aa27d4cecd2e73237de33dd (diff)
set FIPS allow before initialising ctx
Diffstat (limited to 'ssl')
-rw-r--r--ssl/s3_srvr.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/ssl/s3_srvr.c b/ssl/s3_srvr.c
index 2b8cc5fe80..b95648fb31 100644
--- a/ssl/s3_srvr.c
+++ b/ssl/s3_srvr.c
@@ -1877,10 +1877,10 @@ int ssl3_send_server_key_exchange(SSL *s)
j=0;
for (num=2; num > 0; num--)
{
- EVP_DigestInit_ex(&md_ctx,(num == 2)
- ?s->ctx->md5:s->ctx->sha1, NULL);
EVP_MD_CTX_set_flags(&md_ctx,
EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
+ EVP_DigestInit_ex(&md_ctx,(num == 2)
+ ?s->ctx->md5:s->ctx->sha1, NULL);
EVP_DigestUpdate(&md_ctx,&(s->s3->client_random[0]),SSL3_RANDOM_SIZE);
EVP_DigestUpdate(&md_ctx,&(s->s3->server_random[0]),SSL3_RANDOM_SIZE);
EVP_DigestUpdate(&md_ctx,&(d[4]),n);