|
|
|
@ -2,6 +2,7 @@ |
|
|
|
#include <openssl/ssl.h> |
|
|
|
#include <time.h> |
|
|
|
#include "auxlib.h" |
|
|
|
#include "log.h" |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
@ -45,6 +46,9 @@ static void make_OpenSSL_thread_safe(void) { |
|
|
|
|
|
|
|
|
|
|
|
void rtpe_ssl_init(void) { |
|
|
|
ilog(LOG_INFO,"compile-time OpenSSL library: %s\n", OPENSSL_VERSION_TEXT); |
|
|
|
ilog(LOG_INFO,"run-time OpenSSL library: %s\n", OpenSSL_version(OPENSSL_VERSION)); |
|
|
|
|
|
|
|
#if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER) |
|
|
|
SSL_library_init(); |
|
|
|
SSL_load_error_strings(); |
|
|
|
@ -52,6 +56,12 @@ void rtpe_ssl_init(void) { |
|
|
|
#endif |
|
|
|
|
|
|
|
#if OPENSSL_VERSION_NUMBER >= 0x30000000L |
|
|
|
if(EVP_default_properties_is_fips_enabled(NULL) == 1) { |
|
|
|
ilog(LOG_INFO,"FIPS mode enabled in OpenSSL library\n"); |
|
|
|
} else { |
|
|
|
ilog(LOG_DEBUG,"FIPS mode not enabled in OpenSSL library\n"); |
|
|
|
} |
|
|
|
|
|
|
|
EVP_MAC *rtpe_evp_hmac = EVP_MAC_fetch(NULL, "hmac", NULL); |
|
|
|
assert(rtpe_evp_hmac != NULL); |
|
|
|
|
|
|
|
|