[openssl-dev] Compile 1.0.2 release in FIPS mode

[Lars Lavén]

Hi,

I just tried to compile 1.0.2 in FIPS mode and unfortunately I get a 
compilation error. The function tls1_get_curvelist in ssl/t1_lib.c (line 437) 
still looks like it did in beta 3:


#ifdef OPENSSL_FIPS

                if (FIPS_mode())

                        {

                        *pcurves = fips_curves_default;

                        *pcurveslen = sizeof(fips_curves_default);

                        return;

                        }

#endif

It should rather be:


#ifdef OPENSSL_FIPS

                if (FIPS_mode())

                        {

                        *pcurves = fips_curves_default;

                        pcurveslen = sizeof(fips_curves_default);

                        return;

                        }

#endif


--
Kind regards,
Lars Lavén


_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev