Feature compile-guard

diff --git a/src/src/tls-openssl.c b/src/src/tls-openssl.c
index 57b0808fb6d399e98c0aebba66dc2d7c58ce6007..de2e7a3bd4d8aa960b04850588f2b328f9e71859 100644 (file)
--- a/src/src/tls-openssl.c
+++ b/src/src/tls-openssl.c
@@ -1866,6 +1866,7 @@ if (dane)
 #ifndef DISABLE_OCSP
 /* Request certificate status at connection-time.  If the server
 does OCSP stapling we will get the callback (set in tls_init()) */
 #ifndef DISABLE_OCSP
 /* Request certificate status at connection-time.  If the server
 does OCSP stapling we will get the callback (set in tls_init()) */

+# ifdef EXPERIMENTAL_DANE

 if (request_ocsp)
   {
   const uschar * s;
 if (request_ocsp)
   {
   const uschar * s;


@@ -1882,6 +1883,8 @@ if (request_ocsp)
          NULL, host->name, host->address, NULL) == OK;
     }
   }
          NULL, host->name, host->address, NULL) == OK;
     }
   }

+# endif
+

 if (request_ocsp)
   {
   SSL_set_tlsext_status_type(client_ssl, TLSEXT_STATUSTYPE_ocsp);
 if (request_ocsp)
   {
   SSL_set_tlsext_status_type(client_ssl, TLSEXT_STATUSTYPE_ocsp);