Enable dss1 for FIPS mode.

diff --git a/crypto/evp/m_dss1.c b/crypto/evp/m_dss1.c
index f5668ebda0a0033d2d3fd581f68dc46a236a6ce5..23b90d05386df9a335a90b25c0ab339d7a9020bb 100644 (file)
--- a/crypto/evp/m_dss1.c
+++ b/crypto/evp/m_dss1.c
@@ -67,7 +67,14 @@ static int init(EVP_MD_CTX *ctx)
        { return SHA1_Init(ctx->md_data); }
 
 static int update(EVP_MD_CTX *ctx,const void *data,unsigned long count)
+#ifndef OPENSSL_FIPS
        { return SHA1_Update(ctx->md_data,data,count); }
+#else
+       {
+       OPENSSL_assert(sizeof(count)<=sizeof(size_t));
+       return SHA1_Update(ctx->md_data,data,count);
+       }
+#endif
 
 static int final(EVP_MD_CTX *ctx,unsigned char *md)
        { return SHA1_Final(md,ctx->md_data); }
@@ -77,7 +84,7 @@ static const EVP_MD dss1_md=
        NID_dsa,
        NID_dsaWithSHA1,
        SHA_DIGEST_LENGTH,
-       0,
+       EVP_MD_FLAG_FIPS,
        init,
        update,
        final,