securitycheck_fips.c 1.2 KB

12345678910111213141516171819202122232425262728293031323334353637383940
  1. /*
  2. * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
  3. *
  4. * Licensed under the Apache License 2.0 (the "License"). You may not use
  5. * this file except in compliance with the License. You can obtain a copy
  6. * in the file LICENSE in the source distribution or at
  7. * https://www.openssl.org/source/license.html
  8. */
  9. #include "internal/deprecated.h"
  10. #include <openssl/rsa.h>
  11. #include <openssl/dsa.h>
  12. #include <openssl/dh.h>
  13. #include <openssl/ec.h>
  14. #include <openssl/err.h>
  15. #include <openssl/proverr.h>
  16. #include <openssl/core_names.h>
  17. #include <openssl/obj_mac.h>
  18. #include "prov/securitycheck.h"
  19. extern int FIPS_security_check_enabled(void);
  20. int ossl_securitycheck_enabled(void)
  21. {
  22. #if !defined(OPENSSL_NO_FIPS_SECURITYCHECKS)
  23. return FIPS_security_check_enabled();
  24. #else
  25. return 0;
  26. #endif /* OPENSSL_NO_FIPS_SECURITYCHECKS */
  27. }
  28. int ossl_digest_rsa_sign_get_md_nid(const EVP_MD *md, int sha1_allowed)
  29. {
  30. #if !defined(OPENSSL_NO_FIPS_SECURITYCHECKS)
  31. if (ossl_securitycheck_enabled())
  32. return ossl_digest_get_approved_nid_with_sha1(md, sha1_allowed);
  33. #endif /* OPENSSL_NO_FIPS_SECURITYCHECKS */
  34. return ossl_digest_get_approved_nid(md);
  35. }