bpo-40479: Fix typo, flag must be set for OpenSSL < 3.0.0 (GH-30584)

miss-islington · tiran · web-flow · commit 537f16adfa31 · 2022-01-13T13:19:50.000-08:00
(cherry picked from commit 276c234) Co-authored-by: Christian Heimes <christian@python.org>
diff --git a/Modules/_hashopenssl.c b/Modules/_hashopenssl.c
@@ -900,7 +900,7 @@ py_evp_fromname(PyObject *module, const char *digestname, PyObject *data_obj,
         goto exit;
     }
 
-#if defined(EVP_MD_CTX_FLAG_NON_FIPS_ALLOW) &&  OPENSSL_VERSION_NUMBER >= 0x30000000L
+#if defined(EVP_MD_CTX_FLAG_NON_FIPS_ALLOW) && OPENSSL_VERSION_NUMBER < 0x30000000L
     // In OpenSSL 1.1.1 the non FIPS allowed flag is context specific while
     // in 3.0.0 it is a different EVP_MD provider.
     if (!usedforsecurity) {

Original file line number	Diff line number	Diff line change
`@@ -900,7 +900,7 @@ py_evp_fromname(PyObject module, const char digestname, PyObject *data_obj,`
`900`	`900`	`goto exit;`
`901`	`901`	`}`
`902`	`902`
`903`		`-#if defined(EVP_MD_CTX_FLAG_NON_FIPS_ALLOW) && OPENSSL_VERSION_NUMBER >= 0x30000000L`
	`903`	`+#if defined(EVP_MD_CTX_FLAG_NON_FIPS_ALLOW) && OPENSSL_VERSION_NUMBER < 0x30000000L`
`904`	`904`	`// In OpenSSL 1.1.1 the non FIPS allowed flag is context specific while`
`905`	`905`	`// in 3.0.0 it is a different EVP_MD provider.`
`906`	`906`	`if (!usedforsecurity) {`