]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUILD: ssl: use OPENSSL_NO_OCSP to detect OCSP support
authorLukas Tribus <luky-37@hotmail.com>
Tue, 9 Dec 2014 15:32:51 +0000 (16:32 +0100)
committerWilly Tarreau <w@1wt.eu>
Tue, 9 Dec 2014 19:49:22 +0000 (20:49 +0100)
commite4e30f7d524210e34ff2b940e43670a178a0c841
tree2ef8260cf435e19b0a319422d01831ed07e9b870
parentf3d3482c984593b21a6d3de6d66a83a338316b85
BUILD: ssl: use OPENSSL_NO_OCSP to detect OCSP support

Since commit 656c5fa7e859 ("BUILD: ssl: disable OCSP when using
boringssl) the OCSP code is bypassed when OPENSSL_IS_BORINGSSL
is defined. The correct thing to do here is to use OPENSSL_NO_OCSP
instead, which is defined for this exact purpose in
openssl/opensslfeatures.h.

This makes haproxy forward compatible if boringssl ever introduces
full OCSP support with the additional benefit that it links fine
against a OCSP-disabled openssl.

Signed-off-by: Lukas Tribus <luky-37@hotmail.com>
include/proto/ssl_sock.h
src/dumpstats.c
src/ssl_sock.c