From 7017dcf53f4dc990fb92f4856d789ff97814dcf8 Mon Sep 17 00:00:00 2001
From: Perry Werneck <perry.werneck@gmail.com>
Date: Mon, 22 Aug 2022 16:22:13 -0300
Subject: [PATCH] Testing fips disable.

---
 src/network_modules/openssl/context.c | 6 ++++--
 src/testprogram/testprogram.c         | 4 ++++
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/src/network_modules/openssl/context.c b/src/network_modules/openssl/context.c
index 2277011..a8e8314 100644
--- a/src/network_modules/openssl/context.c
+++ b/src/network_modules/openssl/context.c
@@ -155,8 +155,6 @@ SSL_CTX * lib3270_openssl_get_context(H3270 *hSession) {
 	if(context)
 		return context;
 
-	SSL_load_error_strings();
-
 #if !defined(OPENSSL_FIPS)
 
 	lib3270_write_log(
@@ -184,6 +182,9 @@ SSL_CTX * lib3270_openssl_get_context(H3270 *hSession) {
 			if(rc == ERROR_SUCCESS) {
 				DWORD mode = lib3270_win32_get_dword(hKey, "fips_mode", FIPS_mode());
 				if(FIPS_mode_set(mode) != 1) {
+
+					SSL_load_error_strings();
+
 					char err_buff[1024];
 					memset(err_buff,0,sizeof(err_buff));
 					(void) ERR_error_string_n(ERR_get_error(), err_buff, 1023);
@@ -219,6 +220,7 @@ SSL_CTX * lib3270_openssl_get_context(H3270 *hSession) {
 
 #endif
 
+	SSL_load_error_strings();
 	SSL_library_init();
 
 	context = SSL_CTX_new(SSLv23_method());
diff --git a/src/testprogram/testprogram.c b/src/testprogram/testprogram.c
index c98a3b4..a8283ce 100644
--- a/src/testprogram/testprogram.c
+++ b/src/testprogram/testprogram.c
@@ -43,6 +43,10 @@
 #include <lib3270/charset.h>
 #include <stdio.h>
 
+#ifdef HAVE_FIPS_H
+	#include <openssl/fips.h>
+#endif // HAVE_FIPS_H
+
 #ifdef _WIN32
 	#include <lib3270/win32.h>
 #endif // _WIN32
--
libgit2 0.21.2