Skip to content

Commit

Permalink
Remove boring::fips::enable (fixes #150)
Browse files Browse the repository at this point in the history
In boringssl, FIPS_mode_set is more or less useless, and
it doesn't even set an error stack at all on failure,
so there is no point using it instead of FIPS_mode.
  • Loading branch information
nox committed Oct 9, 2023
1 parent 602bb6d commit 0dfabd6
Showing 1 changed file with 0 additions and 7 deletions.
7 changes: 0 additions & 7 deletions boring/src/fips.rs
Original file line number Diff line number Diff line change
Expand Up @@ -7,13 +7,6 @@ use crate::cvt;
use crate::error::ErrorStack;
use crate::ffi;

/// Moves the library into or out of the FIPS 140-2 mode of operation.
///
/// This corresponds to `FIPS_mode_set`.
pub fn enable(enabled: bool) -> Result<(), ErrorStack> {
unsafe { cvt(ffi::FIPS_mode_set(enabled as _)).map(|_| ()) }
}

/// Determines if the library is running in the FIPS 140-2 mode of operation.
///
/// This corresponds to `FIPS_mode`.
Expand Down

0 comments on commit 0dfabd6

Please sign in to comment.