#

# Patch developed in-house.  Solaris-specific; not suitable for upstream. 

#

@@ -135,6 +135,9 @@

 # include <openssl/fips.h>

 /*

  * The LHASH callbacks ("hash" & "cmp") have been replaced by functions with

  * the base prototypes (we cast each variable inside the function to the

@@ -155,9 +158,10 @@

 BIO *bio_err = NULL;

 {

-    static int modes[CRYPTO_NUM_LOCKS]; /* = {0, 0, ... } */

     const char *errstr = NULL;

     int rw;

@@ -167,7 +168,7 @@

         goto err;

     }

-    if (type < 0 || type >= CRYPTO_NUM_LOCKS) {

+    if (type < 0 || type >= CRYPTO_num_locks()) {

         errstr = "type out of bounds";

         goto err;

     }

@@ -305,6 +306,14 @@

     if (getenv("OPENSSL_DEBUG_LOCKING") != NULL)

     {

+        modes = OPENSSL_malloc(CRYPTO_num_locks() * sizeof (int));

+        if (modes == NULL) {

+            ERR_load_crypto_strings();

+            BIO_printf(bio_err,"Memory allocation failure\n");

+            ERR_print_errors(bio_err);

+            EXIT(1);

+        }

+        memset(modes, 0, CRYPTO_num_locks() * sizeof (int));

         CRYPTO_set_locking_callback(lock_dbg_cb);

     }

@@ -308,18 +320,28 @@

         CRYPTO_set_locking_callback(lock_dbg_cb);

     }

     if (getenv("OPENSSL_FIPS")) {

-        if (!FIPS_mode_set(1)) {

+        int (*FIPS_mode_set)(int);

+        FIPS_mode_set = (int (*)(int)) dlsym(RTLD_NEXT, "FIPS_mode_set");

+        if (FIPS_mode_set != NULL) {

+            if (!(*FIPS_mode_set)(1)) {

             ERR_load_crypto_strings();

             ERR_print_errors(BIO_new_fp(stderr, BIO_NOCLOSE));

             EXIT(1);

         }

-        fprintf(stderr, "FIPS mode not supported.\n");

+    } else {

+            fprintf(stderr, "Failed to enable FIPS mode. "

+                "For more information about running in FIPS mode see openssl(5).\n");

         EXIT(1);

     }

+    }

     apps_startup();