1From 37b849dca4dfd855212a763662825e967a4d77b1 Mon Sep 17 00:00:00 2001
2From: Jeremy Harris <jgh146exb@wizmail.org>
3Date: Tue, 7 Nov 2023 15:02:18 +0000
4Subject: [PATCH] OpenSSL: fix non-DANE build
5
6Upstream: https://git.exim.org/exim.git/commitdiff/37b849dca4dfd855212a763662825e967a4d77b1
7
8Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
9---
10 src/tls-openssl.c | 2 +-
11 1 file changed, 1 insertion(+), 1 deletion(-)
12
13diff --git a/src/src/tls-openssl.c b/src/src/tls-openssl.c
14index ef11de593..851ac77c5 100644
15--- a/src/tls-openssl.c
16+++ b/src/tls-openssl.c
17@@ -2605,7 +2605,7 @@ if (!(bs = OCSP_response_get1_basic(rsp)))
18     asking for certificate-status under DANE, so this callback won't run for
19     that combination. It still will for non-DANE. */
20
21-#ifdef EXIM_HAVE_OPENSSL_OCSP_RESP_GET0_SIGNER
22+#if defined(EXIM_HAVE_OPENSSL_OCSP_RESP_GET0_SIGNER) && defined(SUPPORT_DANE)
23     X509 * signer;
24
25     if (  tls_out.dane_verified
26--
272.30.2
28
29