Fix build with recent LibreSSL, when including DANE. Bug 2386

[exim.git] / src / src / dane-openssl.c

diff --git a/src/src/dane-openssl.c b/src/src/dane-openssl.c
index c967a73d1c70c5e04f313ff59fd3967e7c597865..4ac5747c9a5a2bfb91aa2f7c81dd2e7194d90a9e 100644 (file)
--- a/src/src/dane-openssl.c
+++ b/src/src/dane-openssl.c
@@ -2,7 +2,7 @@
  *  Author: Viktor Dukhovni
  *  License: THIS CODE IS IN THE PUBLIC DOMAIN.
  *
- * Copyright (c) The Exim Maintainers 2014 - 2018
+ * Copyright (c) The Exim Maintainers 2014 - 2019
  */
 #include <stdio.h>
 #include <string.h>
@@ -25,28 +25,35 @@
 #if OPENSSL_VERSION_NUMBER < 0x10100000L || defined(LIBRESSL_VERSION_NUMBER)
 # define X509_up_ref(x) CRYPTO_add(&((x)->references), 1, CRYPTO_LOCK_X509)
 #endif
-#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER)
-# define EXIM_HAVE_ASN1_MACROS
-# define EXIM_OPAQUE_X509
-#else
-# define X509_STORE_CTX_get_verify(ctx)                (ctx)->verify
-# define X509_STORE_CTX_get_verify_cb(ctx)     (ctx)->verify_cb
-# define X509_STORE_CTX_get0_cert(ctx)         (ctx)->cert
-# define X509_STORE_CTX_get0_chain(ctx)                (ctx)->chain
-# define X509_STORE_CTX_get0_untrusted(ctx)    (ctx)->untrusted
-
-# define X509_STORE_CTX_set_verify(ctx, verify_chain)  (ctx)->verify = (verify_chain)
-# define X509_STORE_CTX_set0_verified_chain(ctx, sk)   (ctx)->chain = (sk)
-# define X509_STORE_CTX_set_error_depth(ctx, val)      (ctx)->error_depth = (val)
-# define X509_STORE_CTX_set_current_cert(ctx, cert)    (ctx)->current_cert = (cert)
-
-# define ASN1_STRING_get0_data ASN1_STRING_data
-# define X509_getm_notBefore   X509_get_notBefore
-# define X509_getm_notAfter    X509_get_notAfter
-
-# define CRYPTO_ONCE_STATIC_INIT 0
-# define CRYPTO_THREAD_run_once         run_once
+
+#ifdef LIBRESSL_VERSION_NUMBER /* LibreSSL */
+# if LIBRESSL_VERSION_NUMBER >= 0x2090000fL
+#  define EXIM_HAVE_ASN1_MACROS
+# endif
+#else                          /* OpenSSL */
+# if OPENSSL_VERSION_NUMBER >= 0x10100000L
+#  define EXIM_HAVE_ASN1_MACROS
+#  define EXIM_OPAQUE_X509
+# else
+#  define X509_STORE_CTX_get_verify(ctx)               (ctx)->verify
+#  define X509_STORE_CTX_get_verify_cb(ctx)    (ctx)->verify_cb
+#  define X509_STORE_CTX_get0_cert(ctx)                (ctx)->cert
+#  define X509_STORE_CTX_get0_chain(ctx)               (ctx)->chain
+#  define X509_STORE_CTX_get0_untrusted(ctx)   (ctx)->untrusted
+
+#  define X509_STORE_CTX_set_verify(ctx, verify_chain) (ctx)->verify = (verify_chain)
+#  define X509_STORE_CTX_set0_verified_chain(ctx, sk)  (ctx)->chain = (sk)
+#  define X509_STORE_CTX_set_error_depth(ctx, val)     (ctx)->error_depth = (val)
+#  define X509_STORE_CTX_set_current_cert(ctx, cert)   (ctx)->current_cert = (cert)
+
+#  define ASN1_STRING_get0_data        ASN1_STRING_data
+#  define X509_getm_notBefore  X509_get_notBefore
+#  define X509_getm_notAfter   X509_get_notAfter
+
+#  define CRYPTO_ONCE_STATIC_INIT 0
+#  define CRYPTO_THREAD_run_once        run_once
 typedef int CRYPTO_ONCE;
+# endif
 #endif
 
 
@@ -411,7 +418,7 @@ set_issuer_name(X509 *cert, AUTHORITY_KEYID *akid, X509_NAME *subj)
 X509_NAME *name = akid_issuer_name(akid);
 
 /*
- * If subject's akid specifies an authority key identifer issuer name, we
+ * If subject's akid specifies an authority key identifier issuer name, we
  * must use that.
  */
 return X509_set_issuer_name(cert,