From 266cf4a0bc833ac922632e18b72ad03a07df38cf Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Sat, 1 Aug 2015 15:52:35 +0300 Subject: [PATCH] OpenSSL: Comment out openssl_get_keyblock_size() if CONFIG_FIPS=y This function is not used in CONFIG_FIPS=y builds. Signed-off-by: Jouni Malinen --- src/crypto/tls_openssl.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c index 601ea93d5..1dce157d0 100644 --- a/src/crypto/tls_openssl.c +++ b/src/crypto/tls_openssl.c @@ -2679,6 +2679,7 @@ int tls_connection_get_keys(void *ssl_ctx, struct tls_connection *conn, } +#ifndef CONFIG_FIPS static int openssl_get_keyblock_size(SSL *ssl) { #if OPENSSL_VERSION_NUMBER < 0x10100000L @@ -2739,6 +2740,7 @@ static int openssl_get_keyblock_size(SSL *ssl) EVP_CIPHER_iv_length(c)); #endif } +#endif /* CONFIG_FIPS */ static int openssl_tls_prf(void *tls_ctx, struct tls_connection *conn,