From: Dr. Stephen Henson <steve@openssl.org>
Date: Wed, 11 May 2011 14:49:01 +0000 (+0000)
Subject: Set FIPS mode for values other than 1. The only current effect
X-Git-Tag: OpenSSL-fips-2_0-rc1~443
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=2f38b38986c6cdb3e718457deac4a065de825af9;p=oweals%2Fopenssl.git

Set FIPS mode for values other than 1. The only current effect
is to return a consistent value. So calling FIPS_module_mode_set(n)
for n != 0 will result in FIPS_module_mode() returning n. This
will support future expansion of more FIPS modes e.g. a Suite B mode.
---

diff --git a/fips/fips.c b/fips/fips.c
index 6498595ec5..2cb6866d64 100644
--- a/fips/fips.c
+++ b/fips/fips.c
@@ -281,7 +281,7 @@ int FIPS_module_mode_set(int onoff)
 	    }
 
 	if(FIPS_selftest())
-	    fips_set_mode(1);
+	    fips_set_mode(onoff);
 	else
 	    {
 	    fips_selftest_fail = 1;