diff options
| author | Ted Unangst <tedu@cvs.openbsd.org> | 2014-04-15 20:06:11 +0000 |
|---|---|---|
| committer | Ted Unangst <tedu@cvs.openbsd.org> | 2014-04-15 20:06:11 +0000 |
| commit | 1acffe56a9410893729c63d8ba655c60f52dd70d (patch) | |
| tree | 2f0b14116a8fbd6f5539e4e3ce50ce644948fc6d /lib/libcrypto/dsa/dsa_vrf.c | |
| parent | 5bdd68a22c7a5658ad11b9a9f5242513f1abe74c (diff) | |
remove FIPS mode support. people who require FIPS can buy something that
meets their needs, but dumping it in here only penalizes the rest of us.
ok beck deraadt
Diffstat (limited to 'lib/libcrypto/dsa/dsa_vrf.c')
| -rw-r--r-- | lib/libcrypto/dsa/dsa_vrf.c | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/lib/libcrypto/dsa/dsa_vrf.c b/lib/libcrypto/dsa/dsa_vrf.c index 674cb5fa5f5..286ed28cfa5 100644 --- a/lib/libcrypto/dsa/dsa_vrf.c +++ b/lib/libcrypto/dsa/dsa_vrf.c @@ -64,13 +64,5 @@ int DSA_do_verify(const unsigned char *dgst, int dgst_len, DSA_SIG *sig, DSA *dsa) { -#ifdef OPENSSL_FIPS - if (FIPS_mode() && !(dsa->meth->flags & DSA_FLAG_FIPS_METHOD) - && !(dsa->flags & DSA_FLAG_NON_FIPS_ALLOW)) - { - DSAerr(DSA_F_DSA_DO_VERIFY, DSA_R_NON_FIPS_DSA_METHOD); - return -1; - } -#endif return dsa->meth->dsa_do_verify(dgst, dgst_len, sig, dsa); } |