remove FIPS mode support. people who require FIPS can buy something that

meets their needs, but dumping it in here only penalizes the rest of us.
ok miod

1 files changed, 0 insertions, 7 deletions

diff --git a/src/lib/libssl/t1_enc.c b/src/lib/libssl/t1_enc.c
index e59e883424..71d9f164b4 100644
--- a/src/lib/libssl/t1_enc.c
+++ b/src/lib/libssl/t1_enc.c
@@ -981,13 +981,6 @@ tls1_mac(SSL *ssl, unsigned char *md, int send)
                 EVP_DigestSignUpdate(mac_ctx, rec->input, rec->length);
                 t = EVP_DigestSignFinal(mac_ctx, md, &md_size);
                 OPENSSL_assert(t > 0);
-#ifdef OPENSSL_FIPS
-                if (!send && FIPS_mode())
-                        tls_fips_digest_extra(
-                ssl->enc_read_ctx,
-                mac_ctx, rec->input,
-                rec->length, orig_len);
-#endif
         }
 
         if (!stream_mac)