This commit was manufactured by cvs2svn to create branch

[oweals/openssl.git] / ssl / s3_clnt.c

diff --git a/ssl/s3_clnt.c b/ssl/s3_clnt.c
index a18be3e2f112cdb5cfbeed30b1fdaa4500146668..0969476b25fac511c483ddce706cc4ef6222b8b3 100644 (file)
--- a/ssl/s3_clnt.c
+++ b/ssl/s3_clnt.c
@@ -535,7 +535,7 @@ static int ssl3_client_hello(SSL *s)
                p=s->s3->client_random;
                Time=time(NULL);                        /* Time */
                l2n(Time,p);
-               if(RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE-sizeof(Time)) <= 0)
+               if(RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE-4) <= 0)
                    goto err;
 
                /* Do the message type and length last */
@@ -1169,16 +1169,8 @@ static int ssl3_get_key_exchange(SSL *s)
                                EVP_DigestUpdate(&md_ctx,&(s->s3->client_random[0]),SSL3_RANDOM_SIZE);
                                EVP_DigestUpdate(&md_ctx,&(s->s3->server_random[0]),SSL3_RANDOM_SIZE);
                                EVP_DigestUpdate(&md_ctx,param,param_len);
-#ifdef OPENSSL_FIPS
-                               if(s->version == TLS1_VERSION && num == 2)
-                                       FIPS_allow_md5(1);
-#endif
                                
                                EVP_DigestFinal_ex(&md_ctx,q,(unsigned int *)&i);
-#ifdef OPENSSL_FIPS
-                               if(s->version == TLS1_VERSION && num == 2)
-                                       FIPS_allow_md5(1);
-#endif
                                q+=i;
                                j+=i;
                                }