diff options
Diffstat (limited to 'src/lib/libssl/s3_clnt.c')
-rw-r--r-- | src/lib/libssl/s3_clnt.c | 9 |
1 files changed, 2 insertions, 7 deletions
diff --git a/src/lib/libssl/s3_clnt.c b/src/lib/libssl/s3_clnt.c index 0969476b25..36f4a8b4c3 100644 --- a/src/lib/libssl/s3_clnt.c +++ b/src/lib/libssl/s3_clnt.c | |||
@@ -117,7 +117,6 @@ | |||
117 | #include <openssl/objects.h> | 117 | #include <openssl/objects.h> |
118 | #include <openssl/evp.h> | 118 | #include <openssl/evp.h> |
119 | #include <openssl/md5.h> | 119 | #include <openssl/md5.h> |
120 | #include <openssl/fips.h> | ||
121 | 120 | ||
122 | static SSL_METHOD *ssl3_get_client_method(int ver); | 121 | static SSL_METHOD *ssl3_get_client_method(int ver); |
123 | static int ssl3_client_hello(SSL *s); | 122 | static int ssl3_client_hello(SSL *s); |
@@ -169,7 +168,7 @@ int ssl3_connect(SSL *s) | |||
169 | long num1; | 168 | long num1; |
170 | void (*cb)(const SSL *ssl,int type,int val)=NULL; | 169 | void (*cb)(const SSL *ssl,int type,int val)=NULL; |
171 | int ret= -1; | 170 | int ret= -1; |
172 | int new_state,state,skip=0;; | 171 | int new_state,state,skip=0; |
173 | 172 | ||
174 | RAND_add(&Time,sizeof(Time),0); | 173 | RAND_add(&Time,sizeof(Time),0); |
175 | ERR_clear_error(); | 174 | ERR_clear_error(); |
@@ -535,8 +534,7 @@ static int ssl3_client_hello(SSL *s) | |||
535 | p=s->s3->client_random; | 534 | p=s->s3->client_random; |
536 | Time=time(NULL); /* Time */ | 535 | Time=time(NULL); /* Time */ |
537 | l2n(Time,p); | 536 | l2n(Time,p); |
538 | if(RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE-4) <= 0) | 537 | RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE-sizeof(Time)); |
539 | goto err; | ||
540 | 538 | ||
541 | /* Do the message type and length last */ | 539 | /* Do the message type and length last */ |
542 | d=p= &(buf[4]); | 540 | d=p= &(buf[4]); |
@@ -1162,14 +1160,11 @@ static int ssl3_get_key_exchange(SSL *s) | |||
1162 | q=md_buf; | 1160 | q=md_buf; |
1163 | for (num=2; num > 0; num--) | 1161 | for (num=2; num > 0; num--) |
1164 | { | 1162 | { |
1165 | EVP_MD_CTX_set_flags(&md_ctx, | ||
1166 | EVP_MD_CTX_FLAG_NON_FIPS_ALLOW); | ||
1167 | EVP_DigestInit_ex(&md_ctx,(num == 2) | 1163 | EVP_DigestInit_ex(&md_ctx,(num == 2) |
1168 | ?s->ctx->md5:s->ctx->sha1, NULL); | 1164 | ?s->ctx->md5:s->ctx->sha1, NULL); |
1169 | EVP_DigestUpdate(&md_ctx,&(s->s3->client_random[0]),SSL3_RANDOM_SIZE); | 1165 | EVP_DigestUpdate(&md_ctx,&(s->s3->client_random[0]),SSL3_RANDOM_SIZE); |
1170 | EVP_DigestUpdate(&md_ctx,&(s->s3->server_random[0]),SSL3_RANDOM_SIZE); | 1166 | EVP_DigestUpdate(&md_ctx,&(s->s3->server_random[0]),SSL3_RANDOM_SIZE); |
1171 | EVP_DigestUpdate(&md_ctx,param,param_len); | 1167 | EVP_DigestUpdate(&md_ctx,param,param_len); |
1172 | |||
1173 | EVP_DigestFinal_ex(&md_ctx,q,(unsigned int *)&i); | 1168 | EVP_DigestFinal_ex(&md_ctx,q,(unsigned int *)&i); |
1174 | q+=i; | 1169 | q+=i; |
1175 | j+=i; | 1170 | j+=i; |