From: Richard Levitte <levitte@openssl.org>
Date: Sun, 24 Apr 2011 10:07:17 +0000 (+0000)
Subject: fips_check_dsa_prng() should only be built when OPENSSL_FIPS is defined.
X-Git-Tag: OpenSSL-fips-2_0-rc1~504
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=ce67647605895a743d6121c6516727c25e119a73;p=oweals%2Fopenssl.git

fips_check_dsa_prng() should only be built when OPENSSL_FIPS is defined.
---

diff --git a/crypto/dsa/dsa_gen.c b/crypto/dsa/dsa_gen.c
index 4d6bbc0d05..9cde6b7159 100644
--- a/crypto/dsa/dsa_gen.c
+++ b/crypto/dsa/dsa_gen.c
@@ -407,6 +407,7 @@ static int dsa2_valid_parameters(size_t L, size_t N)
 	return 0;
 	}
 
+#ifdef OPENSSL_FIPS
 int fips_check_dsa_prng(DSA *dsa, size_t L, size_t N)
 	{
 	int strength;
@@ -442,6 +443,7 @@ int fips_check_dsa_prng(DSA *dsa, size_t L, size_t N)
 	return 0;
 
 	}
+#endif /* OPENSSL_FIPS */
 
 /* This is a parameter generation algorithm for the DSA2 algorithm as
  * described in FIPS 186-3.