From 98d009bc99f3e55ba83b2d6fca31fb5a5967e7ca Mon Sep 17 00:00:00 2001
From: Stefan Berger <stefanb@linux.ibm.com>
Date: Thu, 25 Aug 2022 16:00:10 -0400
Subject: [PATCH] swtpm: Implement stub for fips_mode_enabled (OpenBSD)

On OpenBSD openssl/fips.h is not available and FIPS_mode() is not
available, so implement a stub for fips_mode_enabled().

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
---
 src/swtpm/fips.c | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/src/swtpm/fips.c b/src/swtpm/fips.c
index 55853717..e67adcbe 100644
--- a/src/swtpm/fips.c
+++ b/src/swtpm/fips.c
@@ -56,6 +56,10 @@ extern int FIPS_mode_set(int);
 
 #include <openssl/err.h>
 
+#if defined(HAVE_OPENSSL_FIPS_H) || defined(HAVE_OPENSSL_FIPS_MODE_SET_API)
+/*
+ * fips_mode_enabled: Determine whether FIPS mode is enabled
+ */
 bool fips_mode_enabled(void)
 {
 #if OPENSSL_VERSION_NUMBER >= 0x30000000L
@@ -74,7 +78,6 @@ bool fips_mode_enabled(void)
  *
  * Returns < 0 on error, 0 otherwise.
  */
-#if defined(HAVE_OPENSSL_FIPS_H) || defined(HAVE_OPENSSL_FIPS_MODE_SET_API)
 int fips_mode_disable(void)
 {
     int ret = 0;
@@ -98,6 +101,11 @@ int fips_mode_disable(void)
 }
 #else
 /* OpenBSD & DragonFlyBSD case */
+bool fips_mode_enabled(void)
+{
+    return false;
+}
+
 int fips_mode_disable(void)
 {
     return 0;