On Thu, Jul 23, 2009, Michael Kurecka wrote: > Dr Henson wrote: > > >No that wont bypass the MD5 check. You can use EVP and set the flag > >EVP_MD_CTX_NON_FIPS_ALLOW if you really want to do that... > > I do need to bypass MD5 because MD5 for RADIUS is FIPS compliant, but I > can't find the EVP_MD_CTX_NON_FIPS_ALLOW flag anywhere. Where is the flag > and how is it set?
Ooops, the flag name is EVP_MD_CTX_FLAG_NON_FIPS_ALLOW and you can set it with: EVP_MD_CTX_set_flags(&ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW); this must be set *before* you call EVP_DigestInit*(). Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
