]> git.ipfire.org Git - thirdparty/hostap.git/commit
OpenSSL: Allow server/client random to be fetched in FIPS mode
authorJouni Malinen <j@w1.fi>
Sat, 1 Aug 2015 15:09:41 +0000 (18:09 +0300)
committerJouni Malinen <j@w1.fi>
Sun, 2 Aug 2015 13:52:56 +0000 (16:52 +0300)
commitd0eb8a0b4edebadbbe5e5235611d6a7b32ea15a9
treeee615437699f7a540cfde8ae01ea46b9af4e812d
parentf413eb03d92cb5e119266da872de03e4c07b7f3b
OpenSSL: Allow server/client random to be fetched in FIPS mode

tls_connection_get_keys() used to return TLS master secret, but that
part was removed in commit 94f1fe6f6384a2ef379ef5b8cdc32a2fa01f8d13
('Remove master key extraction from tls_connection_get_keys()'). Since
then, there is no real need for preventing this function from being used
in FIPS mode.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/crypto/tls_openssl.c