From: Dr. Stephen Henson <steve@openssl.org>
Date: Sun, 1 May 2011 15:36:16 +0000 (+0000)
Subject: Disable SHA256 if not supported.
X-Git-Tag: OpenSSL-fips-2_0-rc1~492
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=823df31be7e5b1a72a5f58d4f1106168e8afbae0;p=oweals%2Fopenssl.git

Disable SHA256 if not supported.
---

diff --git a/ssl/ssl_ciph.c b/ssl/ssl_ciph.c
index 132b848e4a..38d59774ef 100644
--- a/ssl/ssl_ciph.c
+++ b/ssl/ssl_ciph.c
@@ -709,6 +709,7 @@ static void ssl_cipher_get_disabled(unsigned long *mkey, unsigned long *auth, un
 
 	*mac |= (ssl_digest_methods[SSL_MD_MD5_IDX ] == NULL) ? SSL_MD5 :0;
 	*mac |= (ssl_digest_methods[SSL_MD_SHA1_IDX] == NULL) ? SSL_SHA1:0;
+	*mac |= (ssl_digest_methods[SSL_MD_SHA256_IDX] == NULL) ? SSL_SHA256:0;
 	*mac |= (ssl_digest_methods[SSL_MD_GOST94_IDX] == NULL) ? SSL_GOST94:0;
 	*mac |= (ssl_digest_methods[SSL_MD_GOST89MAC_IDX] == NULL || ssl_mac_pkey_id[SSL_MD_GOST89MAC_IDX]==NID_undef)? SSL_GOST89MAC:0;