From 5169a3cf89acf44f25186b2f488e55754764c0d1 Mon Sep 17 00:00:00 2001
From: David Garske <david@wolfssl.com>
Date: Mon, 7 Feb 2022 15:58:10 -0800
Subject: [PATCH] Improve header comments and logic. Remove `NO_PWDBASED` and
 added CRL.

---
 examples/configs/user_settings_fipsv5.h | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/examples/configs/user_settings_fipsv5.h b/examples/configs/user_settings_fipsv5.h
index 90d773fb9..d2d5b0114 100644
--- a/examples/configs/user_settings_fipsv5.h
+++ b/examples/configs/user_settings_fipsv5.h
@@ -69,10 +69,17 @@ extern "C" {
 #define HAVE_TLS_EXTENSIONS
 #define HAVE_SUPPORTED_CURVES
 #define HAVE_EXTENDED_MASTER
-//#define HAVE_SERVER_RENEGOTIATION_INFO
+#define HAVE_CRL
 
-#undef  WOLFSSL_WOLFSSH
+#if 0
+    #define HAVE_SECURE_RENEGOTIATION
+    #define HAVE_SERVER_RENEGOTIATION_INFO
+#endif
+
+#ifndef WOLFSSL_WOLFSSH  /* ifndef check required due to configure already generating flag */
 #define WOLFSSL_WOLFSSH
+#endif
+
 
 /* DH */
 #undef  NO_DH
@@ -135,7 +142,6 @@ extern "C" {
 #define NO_DES3
 #define NO_PSK
 #define NO_DSA
-#define NO_PWDBASED
 #define WOLFSSL_NO_SHAKE256
 #define NO_RABBIT
 #define NO_HC128