From ad76fc8ee191ac27c7614f9a37b6a8c1cc615aca Mon Sep 17 00:00:00 2001
From: jsing <>
Date: Wed, 11 Jun 2014 15:44:10 +0000
Subject: Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored
 since OpenSSL 1.0.0.

ok miod@ (a little while back)
---
 src/lib/libssl/t1_enc.c | 2 --
 1 file changed, 2 deletions(-)

(limited to 'src/lib/libssl/t1_enc.c')

diff --git a/src/lib/libssl/t1_enc.c b/src/lib/libssl/t1_enc.c
index 922d44ad4e..eaf53b48cc 100644
--- a/src/lib/libssl/t1_enc.c
+++ b/src/lib/libssl/t1_enc.c
@@ -165,8 +165,6 @@ tls1_P_hash(const EVP_MD *md, const unsigned char *sec, int sec_len,
 
 	EVP_MD_CTX_init(&ctx);
 	EVP_MD_CTX_init(&ctx_tmp);
-	EVP_MD_CTX_set_flags(&ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
-	EVP_MD_CTX_set_flags(&ctx_tmp, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
 	mac_key = EVP_PKEY_new_mac_key(EVP_PKEY_HMAC, NULL, sec, sec_len);
 	if (!mac_key)
 		goto err;
-- 
cgit v1.2.3-55-g6feb