Add option to fipsinstall to disable fips security checks at run time.

[openssl.git] / providers / common / securitycheck_fips.c

diff --git a/providers/common/securitycheck_fips.c b/providers/common/securitycheck_fips.c
index f73eae95699191d3e4910dbe2ea7ae6988f4bd8d..94457d6ccf1c391bbdbaf31bda116acf92292d64 100644 (file)
--- a/providers/common/securitycheck_fips.c
+++ b/providers/common/securitycheck_fips.c
@@ -19,11 +19,12 @@
 #include "prov/securitycheck.h"
 #include "prov/providercommonerr.h"
 
+extern int FIPS_security_check_enabled(void);
+
 int securitycheck_enabled(void)
 {
 #if !defined(OPENSSL_NO_FIPS_SECURITYCHECKS)
-    /* TODO(3.0): make this configurable */
-    return 1;
+    return FIPS_security_check_enabled();
 #else
     return 0;
 #endif /* OPENSSL_NO_FIPS_SECURITYCHECKS */