tls: The 'untrusted' is only when OCSP + OpenSSL >= 1.1.x (#5120)

diff --git a/src/main/tls.c b/src/main/tls.c
index 7b4bcaeb2b9566f4f68c7591a9e31ca4d24cbde8..e9c8a0c37488242d214ce1d50415745bc1a2344d 100644 (file)
--- a/src/main/tls.c
+++ b/src/main/tls.c
@@ -3423,7 +3423,7 @@ int cbtls_verify(int ok, X509_STORE_CTX *ctx)
                        }
                } /* check_cert_cn */
 
-#ifdef HAVE_OPENSSL_OCSP_H
+#if OPENSSL_VERSION_NUMBER >= 0x10100000L && defined(HAVE_OPENSSL_OCSP_H)
                if (my_ok) {
                        /*
                         *      No OCSP, allow external verification.