Commit 3cc52ee9 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Don't set non fips allow flags when calling RSA_new() and DSA_new().

parent 822da9cc

crypto/dsa/dsa_lib.c

+1 −1
Original line number Diff line number Diff line
@@ -190,7 +190,7 @@ DSA *DSA_new_method(ENGINE *engine) 
	ret->method_mont_p=NULL;



	ret->references=1;

	ret->flags=ret->meth->flags;

	ret->flags=ret->meth->flags & ~DSA_FLAG_NON_FIPS_ALLOW;

	CRYPTO_new_ex_data(CRYPTO_EX_INDEX_DSA, ret, &ret->ex_data);

	if ((ret->meth->init != NULL) && !ret->meth->init(ret))

		{

crypto/rsa/rsa_eng.c

+1 −1
Original line number Diff line number Diff line
@@ -207,7 +207,7 @@ RSA *RSA_new_method(ENGINE *engine) 
	ret->blinding=NULL;

	ret->mt_blinding=NULL;

	ret->bignum_data=NULL;

	ret->flags=ret->meth->flags;

	ret->flags=ret->meth->flags & ~RSA_FLAG_NON_FIPS_ALLOW;

	CRYPTO_new_ex_data(CRYPTO_EX_INDEX_RSA, ret, &ret->ex_data);

	if ((ret->meth->init != NULL) && !ret->meth->init(ret))

		{