diff options
| author |   tedu <tedu@openbsd.org> | 2014-04-15 19:42:56 +0000 |
|---|---|---|
| committer | tedu <tedu@openbsd.org> | 2014-04-15 19:42:56 +0000 |
| commit | 9aa350fda47654255da340793da9ac9b2422db9c (patch) | |
| tree | 35c7560d24ab5b1ee73cc180f2bb87940d0584f5 /lib/libssl/src/ssl/t1_enc.c | |
| parent | In EC_POINT_invert(), actually check the correct function pointer for NULL (diff) | |
| download | wireguard-openbsd-9aa350fda47654255da340793da9ac9b2422db9c.tar.xz wireguard-openbsd-9aa350fda47654255da340793da9ac9b2422db9c.zip | |
remove FIPS mode support. people who require FIPS can buy something that
meets their needs, but dumping it in here only penalizes the rest of us.
ok miod
Diffstat (limited to 'lib/libssl/src/ssl/t1_enc.c')
| -rw-r--r-- | lib/libssl/src/ssl/t1_enc.c | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/lib/libssl/src/ssl/t1_enc.c b/lib/libssl/src/ssl/t1_enc.c index e59e883424e..71d9f164b48 100644 --- a/lib/libssl/src/ssl/t1_enc.c +++ b/lib/libssl/src/ssl/t1_enc.c @@ -981,13 +981,6 @@ tls1_mac(SSL *ssl, unsigned char *md, int send) EVP_DigestSignUpdate(mac_ctx, rec->input, rec->length); t = EVP_DigestSignFinal(mac_ctx, md, &md_size); OPENSSL_assert(t > 0); -#ifdef OPENSSL_FIPS - if (!send && FIPS_mode()) - tls_fips_digest_extra( - ssl->enc_read_ctx, - mac_ctx, rec->input, - rec->length, orig_len); -#endif } if (!stream_mac) |