DKIM: fix build with older GnuTLS

diff --git a/src/src/pdkim/signing.c b/src/src/pdkim/signing.c
index d818fc9df0de02272b656eb7beeed0c4261145d1..5f24e8030c77caac8ed29ba8700160eb95f24d4a 100644 (file)
--- a/src/src/pdkim/signing.c
+++ b/src/src/pdkim/signing.c
@@ -37,6 +37,10 @@ features_crypto(void)
 #ifdef SIGN_GNUTLS
 # define EXIM_GNUTLS_LIBRARY_LOG_LEVEL 3
 
+# ifndef GNUTLS_VERIFY_ALLOW_BROKEN
+#  define GNUTLS_VERIFY_ALLOW_BROKEN 0
+# endif
+
 
 /* Logging function which can be registered with
  *   gnutls_global_set_log_function()

diff --git a/test/runtest b/test/runtest
index 9bde9046fc8fb11d681e9314512e4fc387f74549..f595634e9622b589f699e787bdb62a5c42990fb7 100755 (executable)
--- a/test/runtest
+++ b/test/runtest
@@ -1097,6 +1097,7 @@ RESET_AFTER_EXTRA_LINE_READ:
     next if /^GnuTLS<2>: (Disabling X.509 extensions|signing structure using RSA-SHA256)/;
     next if /^GnuTLS.*(wrap_nettle_mpi_print|gnutls_subject_alt_names_get|get_alt_name)/;
     next if /^GnuTLS<[23]>: (p11|ASSERT: pkcs11.c|Initializing needed PKCS #11 modules)/;
+    next if /^GnuTLS<2>: Intel (AES|GCM) accelerator was detected/;
     next if /^Added \d{3} certificate authorities/;
     next if /^TLS: not preloading CRL for server/;