From ea717df2f3c9582198e1e40e6d5a566a33974039 Mon Sep 17 00:00:00 2001
From: tedu <>
Date: Tue, 15 Apr 2014 19:42:56 +0000
Subject: remove FIPS mode support. people who require FIPS can buy something
 that meets their needs, but dumping it in here only penalizes the rest of us.
 ok miod

---
 src/lib/libssl/t1_enc.c | 7 -------
 1 file changed, 7 deletions(-)

(limited to 'src/lib/libssl/t1_enc.c')

diff --git a/src/lib/libssl/t1_enc.c b/src/lib/libssl/t1_enc.c
index e59e883424..71d9f164b4 100644
--- a/src/lib/libssl/t1_enc.c
+++ b/src/lib/libssl/t1_enc.c
@@ -981,13 +981,6 @@ tls1_mac(SSL *ssl, unsigned char *md, int send)
 		EVP_DigestSignUpdate(mac_ctx, rec->input, rec->length);
 		t = EVP_DigestSignFinal(mac_ctx, md, &md_size);
 		OPENSSL_assert(t > 0);
-#ifdef OPENSSL_FIPS
-		if (!send && FIPS_mode())
-			tls_fips_digest_extra(
-		ssl->enc_read_ctx,
-		mac_ctx, rec->input,
-		rec->length, orig_len);
-#endif
 	}
 
 	if (!stream_mac)
-- 
cgit v1.2.3-55-g6feb