Remove some unnecessary OPENSSL_FIPS references

[openssl.git] / ssl / s3_cbc.c

diff --git a/ssl/s3_cbc.c b/ssl/s3_cbc.c
index 27f309e72d66de57b4e60b1721f7aa45a006dfb4..6087ee3553faeaa1420a2f84936abd3cd4a627e0 100644 (file)
--- a/ssl/s3_cbc.c
+++ b/ssl/s3_cbc.c
@@ -353,10 +353,8 @@ static void tls1_sha512_final_raw(void* ctx, unsigned char *md_out)
  * which ssl3_cbc_digest_record supports. */
 char ssl3_cbc_record_digest_supported(const EVP_MD_CTX *ctx)
        {
-#ifdef OPENSSL_FIPS
        if (FIPS_mode())
                return 0;
-#endif
        switch (EVP_MD_CTX_type(ctx))
                {
                case NID_md5:
@@ -705,8 +703,6 @@ void ssl3_cbc_digest_record(
        EVP_MD_CTX_cleanup(&md_ctx);
        }
 
-#ifdef OPENSSL_FIPS
-
 /* Due to the need to use EVP in FIPS mode we can't reimplement digests but
  * we can ensure the number of blocks processed is equal for all cases
  * by digesting additional data.
@@ -750,4 +746,3 @@ void tls_fips_digest_extra(
        EVP_DigestSignUpdate(mac_ctx, data,
                                (blocks_orig - blocks_data + 1) * block_size);
        }
-#endif