Update pairwise consistency checks to use SHA-256.

[openssl.git] / fips / fips.c

diff --git a/fips/fips.c b/fips/fips.c
index 3d745557fcb070315ae2ae1c598b80cd4ab8d480..6a90328d7e38f5c9f31947c2c2a5291b434fdcbf 100644 (file)
--- a/fips/fips.c
+++ b/fips/fips.c
@@ -454,6 +454,9 @@ int fips_pkey_signature_test(EVP_PKEY *pkey,
        if (tbslen == -1)
                tbslen = strlen((char *)tbs);
 
+       if (digest == NULL)
+               digest = EVP_sha256();
+
        if (!FIPS_digestinit(&mctx, digest))
                goto error;
        if (!FIPS_digestupdate(&mctx, tbs, tbslen))
@@ -498,7 +501,7 @@ int fips_pkey_signature_test(EVP_PKEY *pkey,
 
        error:
        if (dsig != NULL)
-               DSA_SIG_free(dsig);
+               FIPS_dsa_sig_free(dsig);
        if (sig != sigtmp)
                OPENSSL_free(sig);
        FIPS_md_ctx_cleanup(&mctx);