Stop using EVP_MD_CTX_FLAG_NON_FIPS_ALLOW
authorRichard Levitte <levitte@openssl.org>
Thu, 10 Oct 2019 16:49:28 +0000 (18:49 +0200)
committerRichard Levitte <levitte@openssl.org>
Fri, 11 Oct 2019 07:52:31 +0000 (09:52 +0200)
commit47b4ccea9cb9b924d058fd5a8583f073b7a41656
treed6d85ac59b1e3eaa93addfba5d7bbecd0d551b44
parentbe66a15cc1a4c3cc68fa854ceea321ca57f96304
Stop using EVP_MD_CTX_FLAG_NON_FIPS_ALLOW

This is a flag that has lost its relevance.  The new mechanism to do
the same thing is to fetch the needed digest explicitly with "-fips"
as property query, i.e. we remove any requirement for that property to
be set when fetching, even if the default property query string
requires its presence.

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/10138)
crypto/x509/x509_cmp.c
include/openssl/core_names.h
ssl/s3_enc.c