set non-FIPS flag for FIPS build

diff --git a/src/modules/rlm_eap/libeap/mppe_keys.c b/src/modules/rlm_eap/libeap/mppe_keys.c
index 5c222407d816d28ee2c626dffd2c994e063771b1..b016c2b885a8611fe25795c9085621cde309bb54 100644 (file)
--- a/src/modules/rlm_eap/libeap/mppe_keys.c
+++ b/src/modules/rlm_eap/libeap/mppe_keys.c
@@ -44,6 +44,10 @@ static void P_hash(EVP_MD const *evp_md,
 
        HMAC_CTX_init(&ctx_a);
        HMAC_CTX_init(&ctx_out);
+#ifdef EVP_MD_CTX_FLAG_NON_FIPS_ALLOW
+       HMAC_CTX_set_flags(&ctx_a, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
+       HMAC_CTX_set_flags(&ctx_out, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
+#endif
        HMAC_Init_ex(&ctx_a, secret, secret_len, evp_md, NULL);
        HMAC_Init_ex(&ctx_out, secret, secret_len, evp_md, NULL);