Index: openssl/crypto/dh/dh_check.c |
=================================================================== |
--- openssl/crypto/dh/dh_check.c (revision 105093) |
+++ openssl/crypto/dh/dh_check.c (working copy) |
@@ -70,8 +70,6 @@ |
* should hold. |
*/ |
-#ifndef OPENSSL_FIPS |
- |
int DH_check(const DH *dh, int *ret) |
{ |
int ok=0; |
@@ -130,11 +128,11 @@ |
q=BN_new(); |
if (q == NULL) goto err; |
BN_set_word(q,1); |
- if (BN_cmp(pub_key,q) <= 0) |
+ if (BN_cmp(pub_key,q)<=0) |
*ret|=DH_CHECK_PUBKEY_TOO_SMALL; |
BN_copy(q,dh->p); |
BN_sub_word(q,1); |
- if (BN_cmp(pub_key,q) >= 0) |
+ if (BN_cmp(pub_key,q)>=0) |
*ret|=DH_CHECK_PUBKEY_TOO_LARGE; |
ok = 1; |
@@ -142,5 +140,3 @@ |
if (q != NULL) BN_free(q); |
return(ok); |
} |
- |
-#endif |