OpenSSL: Comment out openssl_get_keyblock_size() if CONFIG_FIPS=y

This function is not used in CONFIG_FIPS=y builds.

Signed-off-by: Jouni Malinen <j@w1.fi>

diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c
index 601ea93d58c1752d500d2139c120c5721b053ebf..1dce157d0f234714aed40e4a4434144469c23033 100644 (file)
--- a/src/crypto/tls_openssl.c
+++ b/src/crypto/tls_openssl.c
@@ -2679,6 +2679,7 @@ int tls_connection_get_keys(void *ssl_ctx, struct tls_connection *conn,
 }
 
 
+#ifndef CONFIG_FIPS
 static int openssl_get_keyblock_size(SSL *ssl)
 {
 #if OPENSSL_VERSION_NUMBER < 0x10100000L
@@ -2739,6 +2740,7 @@ static int openssl_get_keyblock_size(SSL *ssl)
                    EVP_CIPHER_iv_length(c));
 #endif
 }
+#endif /* CONFIG_FIPS */
 
 
 static int openssl_tls_prf(void *tls_ctx, struct tls_connection *conn,