Constify RSA signature buffer.

diff --git a/fips/fips.h b/fips/fips.h
index 2fa56dbf02e29e78a6edc7d00546edacb52bc2f4..4bebd4cfca9d502e069164c4459fbb01a43878ff 100644 (file)
--- a/fips/fips.h
+++ b/fips/fips.h
@@ -190,13 +190,13 @@ int FIPS_rsa_sign_digest(struct rsa_st *rsa,
 int FIPS_rsa_verify_ctx(struct rsa_st *rsa, struct env_md_ctx_st *ctx,
                        int rsa_pad_mode, int saltlen,
                        const struct env_md_st *mgf1Hash,
-                       unsigned char *sigbuf, unsigned int siglen);
+                       const unsigned char *sigbuf, unsigned int siglen);
 int FIPS_rsa_verify_digest(struct rsa_st *rsa,
                        const unsigned char *dig, int diglen,
                        const struct env_md_st *mhash,
                        int rsa_pad_mode, int saltlen,
                        const struct env_md_st *mgf1Hash,
-                       unsigned char *sigbuf, unsigned int siglen);
+                       const unsigned char *sigbuf, unsigned int siglen);
 
 #ifndef OPENSSL_FIPSCANISTER
 

diff --git a/fips/rsa/fips_rsa_sign.c b/fips/rsa/fips_rsa_sign.c
index a4c62bf1ce5c206da616bfc545ed354491fe6afd..4e1f27d48df95d5eba29cf4723f9a6a89e9f4a2d 100644 (file)
--- a/fips/rsa/fips_rsa_sign.c
+++ b/fips/rsa/fips_rsa_sign.c
@@ -304,7 +304,7 @@ int FIPS_rsa_sign_digest(RSA *rsa, const unsigned char *md, int md_len,
 
 int FIPS_rsa_verify_ctx(RSA *rsa, EVP_MD_CTX *ctx,
                        int rsa_pad_mode, int saltlen, const EVP_MD *mgf1Hash,
-                       unsigned char *sigbuf, unsigned int siglen)
+                       const unsigned char *sigbuf, unsigned int siglen)
        {
        unsigned int md_len, rv;
        unsigned char md[EVP_MAX_MD_SIZE];
@@ -319,7 +319,7 @@ int FIPS_rsa_verify_ctx(RSA *rsa, EVP_MD_CTX *ctx,
 int FIPS_rsa_verify_digest(RSA *rsa, const unsigned char *dig, int diglen,
                        const EVP_MD *mhash, int rsa_pad_mode, int saltlen,
                        const EVP_MD *mgf1Hash,
-                       unsigned char *sigbuf, unsigned int siglen)
+                       const unsigned char *sigbuf, unsigned int siglen)
        {
        int i,ret=0;
        unsigned int dlen;