fips_check_dsa_prng() should only be built when OPENSSL_FIPS is defined.

diff --git a/crypto/dsa/dsa_gen.c b/crypto/dsa/dsa_gen.c
index 4d6bbc0d05928313e16f69ed879ee163003f509e..9cde6b71599ba7a8793934d9231dfce4146b0120 100644 (file)
--- a/crypto/dsa/dsa_gen.c
+++ b/crypto/dsa/dsa_gen.c
@@ -407,6 +407,7 @@ static int dsa2_valid_parameters(size_t L, size_t N)
        return 0;
        }
 
+#ifdef OPENSSL_FIPS
 int fips_check_dsa_prng(DSA *dsa, size_t L, size_t N)
        {
        int strength;
@@ -442,6 +443,7 @@ int fips_check_dsa_prng(DSA *dsa, size_t L, size_t N)
        return 0;
 
        }
+#endif /* OPENSSL_FIPS */
 
 /* This is a parameter generation algorithm for the DSA2 algorithm as
  * described in FIPS 186-3.