forked from rpms/openssl
c67ea975b9
- allow X509_issuer_and_serial_hash() produce correct result in the FIPS mode (#881336)
12 lines
542 B
Diff
12 lines
542 B
Diff
diff -up openssl-1.0.1c/crypto/x509/x509_cmp.c.issuer-hash openssl-1.0.1c/crypto/x509/x509_cmp.c
|
|
--- openssl-1.0.1c/crypto/x509/x509_cmp.c.issuer-hash 2011-06-22 04:18:06.000000000 +0200
|
|
+++ openssl-1.0.1c/crypto/x509/x509_cmp.c 2012-12-21 17:18:38.101308997 +0100
|
|
@@ -85,6 +85,7 @@ unsigned long X509_issuer_and_serial_has
|
|
char *f;
|
|
|
|
EVP_MD_CTX_init(&ctx);
|
|
+ EVP_MD_CTX_set_flags(&ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
|
|
f=X509_NAME_oneline(a->cert_info->issuer,NULL,0);
|
|
ret=strlen(f);
|
|
if (!EVP_DigestInit_ex(&ctx, EVP_md5(), NULL))
|