From: Dr. Stephen Henson <steve@openssl.org>
Date: Wed, 6 Jul 2005 18:29:00 +0000 (+0000)
Subject: Enable dss1 for FIPS mode.
X-Git-Tag: OpenSSL_0_9_7h~11
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=a0434788ce40562e764f09cb6161f7f26abd63e2;p=oweals%2Fopenssl.git

Enable dss1 for FIPS mode.
---

diff --git a/crypto/evp/m_dss1.c b/crypto/evp/m_dss1.c
index f5668ebda0..23b90d0538 100644
--- a/crypto/evp/m_dss1.c
+++ b/crypto/evp/m_dss1.c
@@ -67,7 +67,14 @@ static int init(EVP_MD_CTX *ctx)
 	{ return SHA1_Init(ctx->md_data); }
 
 static int update(EVP_MD_CTX *ctx,const void *data,unsigned long count)
+#ifndef OPENSSL_FIPS
 	{ return SHA1_Update(ctx->md_data,data,count); }
+#else
+	{
+	OPENSSL_assert(sizeof(count)<=sizeof(size_t));
+	return SHA1_Update(ctx->md_data,data,count);
+	}
+#endif
 
 static int final(EVP_MD_CTX *ctx,unsigned char *md)
 	{ return SHA1_Final(md,ctx->md_data); }
@@ -77,7 +84,7 @@ static const EVP_MD dss1_md=
 	NID_dsa,
 	NID_dsaWithSHA1,
 	SHA_DIGEST_LENGTH,
-	0,
+	EVP_MD_FLAG_FIPS,
 	init,
 	update,
 	final,