openssl/openssl-0.9.8j-fips-no-pairwise.patch

   1 diff -up openssl-0.9.8j/fips/rsa/fips_rsa_gen.c.no-pairwise openssl-0.9.8j/fips/rsa/fips_rsa_gen.c
   2 --- openssl-0.9.8j/fips/rsa/fips_rsa_gen.c.no-pairwise  2009-01-17 20:27:37.000000000 +0100
   3 +++ openssl-0.9.8j/fips/rsa/fips_rsa_gen.c      2009-01-17 20:27:28.000000000 +0100
   4 @@ -288,7 +288,7 @@ static int rsa_builtin_keygen(RSA *rsa,
   5         if (fips_rsa_pairwise_fail)
   6                 BN_add_word(rsa->n, 1);
   7
   8 -       if(!fips_check_rsa(rsa))
   9 +       if(FIPS_mode() && !fips_check_rsa(rsa))
  10             goto err;
  11
  12         ok=1;
  13 diff -up openssl-0.9.8j/fips/dsa/fips_dsa_key.c.no-pairwise openssl-0.9.8j/fips/dsa/fips_dsa_key.c
  14 --- openssl-0.9.8j/fips/dsa/fips_dsa_key.c.no-pairwise  2008-09-16 12:12:15.000000000 +0200
  15 +++ openssl-0.9.8j/fips/dsa/fips_dsa_key.c      2009-01-17 20:26:20.000000000 +0100
  16 @@ -154,7 +154,7 @@ static int dsa_builtin_keygen(DSA *dsa)
  17         dsa->pub_key=pub_key;
  18         if (fips_dsa_pairwise_fail)
  19                 BN_add_word(dsa->pub_key, 1);
  20 -       if(!fips_check_dsa(dsa))
  21 +       if(FIPS_mode() && !fips_check_dsa(dsa))
  22             goto err;
  23         ok=1;
  24