Set FIPS mode for values other than 1. The only current effect
authorDr. Stephen Henson <steve@openssl.org>
Wed, 11 May 2011 14:49:01 +0000 (14:49 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 11 May 2011 14:49:01 +0000 (14:49 +0000)
is to return a consistent value. So calling FIPS_module_mode_set(n)
for n != 0 will result in FIPS_module_mode() returning n. This
will support future expansion of more FIPS modes e.g. a Suite B mode.

fips/fips.c

index 6498595ec5232d7f2b6a29dba432524b53bddc42..2cb6866d64982c4e462c08b42d908b508afbcbaf 100644 (file)
@@ -281,7 +281,7 @@ int FIPS_module_mode_set(int onoff)
            }
 
        if(FIPS_selftest())
-           fips_set_mode(1);
+           fips_set_mode(onoff);
        else
            {
            fips_selftest_fail = 1;