@@ -151,6 +151,11 @@ unsigned char *cl_hash_data(char *alg, const void *buf, size_t len, unsigned cha

         return NULL;

     }

+#ifdef EVP_MD_CTX_FLAG_NON_FIPS_ALLOW

+    /* we will be using MD5, which is not allowed under FIPS */

+    EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);

+#endif

+

     if (!EVP_DigestInit_ex(ctx, md, NULL)) {

         if (!(obuf))

             free(ret);

@@ -212,6 +217,11 @@ unsigned char *cl_hash_file_fd(int fd, char *alg, unsigned int *olen)

     if (!(ctx))

         return NULL;

+#ifdef EVP_MD_CTX_FLAG_NON_FIPS_ALLOW

+    /* we will be using MD5, which is not allowed under FIPS */

+    EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);

+#endif

+

     if (!EVP_DigestInit_ex(ctx, md, NULL)) {

         EVP_MD_CTX_destroy(ctx);

         return NULL;

@@ -321,6 +331,11 @@ int cl_verify_signature_hash(EVP_PKEY *pkey, char *alg, unsigned char *sig, unsi

     mdsz = EVP_MD_size(md);

+#ifdef EVP_MD_CTX_FLAG_NON_FIPS_ALLOW

+    /* we will be using MD5, which is not allowed under FIPS */

+    EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);

+#endif

+

     if (!EVP_VerifyInit_ex(ctx, md, NULL)) {

         EVP_MD_CTX_destroy(ctx);

         return -1;

@@ -365,6 +380,11 @@ int cl_verify_signature_fd(EVP_PKEY *pkey, char *alg, unsigned char *sig, unsign

         return -1;

     }

+#ifdef EVP_MD_CTX_FLAG_NON_FIPS_ALLOW

+    /* we will be using MD5, which is not allowed under FIPS */

+    EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);

+#endif

+

     if (!EVP_VerifyInit_ex(ctx, md, NULL)) {

         free(digest);

         EVP_MD_CTX_destroy(ctx);

@@ -435,6 +455,11 @@ int cl_verify_signature(EVP_PKEY *pkey, char *alg, unsigned char *sig, unsigned

         return -1;

     }

+#ifdef EVP_MD_CTX_FLAG_NON_FIPS_ALLOW

+    /* we will be using MD5, which is not allowed under FIPS */

+    EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);

+#endif

+

     if (!EVP_VerifyInit_ex(ctx, md, NULL)) {

         free(digest);

         if (decode)

@@ -643,6 +668,11 @@ unsigned char *cl_sign_data(EVP_PKEY *pkey, char *alg, unsigned char *hash, unsi

         return NULL;

     }

+#ifdef EVP_MD_CTX_FLAG_NON_FIPS_ALLOW

+    /* we will be using MD5, which is not allowed under FIPS */

+    EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);

+#endif

+

     if (!EVP_SignInit_ex(ctx, md, NULL)) {

         free(sig);

         EVP_MD_CTX_destroy(ctx);

@@ -1078,6 +1108,11 @@ void *cl_hash_init(const char *alg)

         return NULL;

     }

+#ifdef EVP_MD_CTX_FLAG_NON_FIPS_ALLOW

+    /* we will be using MD5, which is not allowed under FIPS */

+    EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);

+#endif

+

     if (!EVP_DigestInit_ex(ctx, md, NULL)) {

         EVP_MD_CTX_destroy(ctx);

         return NULL;