diff options
| author |   tedu <tedu@openbsd.org> | 2014-04-15 19:42:56 +0000 |
|---|---|---|
| committer | tedu <tedu@openbsd.org> | 2014-04-15 19:42:56 +0000 |
| commit | 9aa350fda47654255da340793da9ac9b2422db9c (patch) | |
| tree | 35c7560d24ab5b1ee73cc180f2bb87940d0584f5 /lib/libssl/src/ssl/ssl_lib.c | |
| parent | In EC_POINT_invert(), actually check the correct function pointer for NULL (diff) | |
| download | wireguard-openbsd-9aa350fda47654255da340793da9ac9b2422db9c.tar.xz wireguard-openbsd-9aa350fda47654255da340793da9ac9b2422db9c.zip | |
remove FIPS mode support. people who require FIPS can buy something that
meets their needs, but dumping it in here only penalizes the rest of us.
ok miod
Diffstat (limited to 'lib/libssl/src/ssl/ssl_lib.c')
| -rw-r--r-- | lib/libssl/src/ssl/ssl_lib.c | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/lib/libssl/src/ssl/ssl_lib.c b/lib/libssl/src/ssl/ssl_lib.c index 98764b82aa1..b5ba0f4aac5 100644 --- a/lib/libssl/src/ssl/ssl_lib.c +++ b/lib/libssl/src/ssl/ssl_lib.c @@ -1708,13 +1708,6 @@ SSL_CTX return (NULL); } -#ifdef OPENSSL_FIPS - if (FIPS_mode() && (meth->version < TLS1_VERSION)) { - SSLerr(SSL_F_SSL_CTX_NEW, SSL_R_ONLY_TLS_ALLOWED_IN_FIPS_MODE); - return NULL; - } -#endif - if (SSL_get_ex_data_X509_STORE_CTX_idx() < 0) { SSLerr(SSL_F_SSL_CTX_NEW, SSL_R_X509_VERIFICATION_SETUP_PROBLEMS); goto err; |