OpenSSL: fix non-DANE build
authorJeremy Harris <jgh146exb@wizmail.org>
Tue, 7 Nov 2023 15:02:18 +0000 (15:02 +0000)
committerJeremy Harris <jgh146exb@wizmail.org>
Tue, 7 Nov 2023 15:02:18 +0000 (15:02 +0000)
src/src/tls-openssl.c

index ef11de593590b313eb581537693b64650085feff..851ac77c514604dfc4d3bee7781d893d329a5bee 100644 (file)
@@ -2605,7 +2605,7 @@ if (!(bs = OCSP_response_get1_basic(rsp)))
     asking for certificate-status under DANE, so this callback won't run for
     that combination. It still will for non-DANE. */
 
     asking for certificate-status under DANE, so this callback won't run for
     that combination. It still will for non-DANE. */
 
-#ifdef EXIM_HAVE_OPENSSL_OCSP_RESP_GET0_SIGNER
+#if defined(EXIM_HAVE_OPENSSL_OCSP_RESP_GET0_SIGNER) && defined(SUPPORT_DANE)
     X509 * signer;
 
     if (  tls_out.dane_verified
     X509 * signer;
 
     if (  tls_out.dane_verified