USE_SHA2 is about SHA2 rrsigs, not DS hash algorithm

diff --git a/dnssec.c b/dnssec.c
index e0be3ceed8b1dc8e0d78a27a9d52c7d271c9f5a0..2e92b0ea986d42319302e25013ecdc61c9e91e7c 100644 (file)
--- a/dnssec.c
+++ b/dnssec.c
@@ -460,17 +460,16 @@ ldns_key_rr2ds(const ldns_rr *key, ldns_hash h)
                }
                break;
        case LDNS_SHA256:
-#ifdef USE_SHA2
+#ifdef SHA256_DIGEST_LENGTH
                digest = LDNS_XMALLOC(uint8_t, SHA256_DIGEST_LENGTH);
                if (!digest) {
                        ldns_rr_free(ds);
                        return NULL;
                }
 #else
-               printf("[XX] SHA2 disabled\n");
                return NULL;
 #endif
-break;
+               break;
        }
 
        data_buf = ldns_buffer_new(LDNS_MAX_PACKETLEN);
@@ -530,7 +529,7 @@ break;
 
                break;
        case LDNS_SHA256:
-#ifdef USE_SHA2
+#ifdef SHA256_DIGEST_LENGTH
                (void) SHA256((unsigned char *) ldns_buffer_begin(data_buf),
                                    ldns_buffer_position(data_buf),
                                    (unsigned char*) digest);