Blame SOURCES/wpa_supplicant-openssl-more-algs.patch

e28318
diff -up wpa_supplicant-0.7.3/src/crypto/tls_openssl.c.more-openssl-algs wpa_supplicant-0.7.3/src/crypto/tls_openssl.c
e28318
--- wpa_supplicant-0.7.3/src/crypto/tls_openssl.c.more-openssl-algs	2010-09-07 10:43:39.000000000 -0500
e28318
+++ wpa_supplicant-0.7.3/src/crypto/tls_openssl.c	2010-12-08 10:01:02.967664004 -0600
e28318
@@ -710,6 +710,11 @@ void * tls_init(const struct tls_config 
e28318
 #endif /* OPENSSL_FIPS */
e28318
 #endif /* CONFIG_FIPS */
e28318
 		SSL_load_error_strings();
e28318
+		/* Only add potentially weak hashes and encryption algorithms
e28318
+		 * when FIPS mode is not enabled.
e28318
+		 */
e28318
+		if (!conf || !conf->fips_mode)
e28318
+			OpenSSL_add_all_algorithms();
e28318
 		SSL_library_init();
e28318
 #if (OPENSSL_VERSION_NUMBER >= 0x0090800fL) && !defined(OPENSSL_NO_SHA256)
e28318
 		EVP_add_digest(EVP_sha256());
e28318