Do not use DSA API unless USE_DSA is set

Even if USE_DSA is unset, unbound ends up linking against OpenSSL
DSA API because these guards are missing.

diff --git a/sldns/keyraw.c b/sldns/keyraw.c
index befe1f722424324c4cbb90cf6ff4c718ee2046c9..90a6e85337c2ea2e79859a6138eccf0c9d5ebbdf 100644 (file)
--- a/sldns/keyraw.c
+++ b/sldns/keyraw.c
@@ -195,6 +195,7 @@ void sldns_key_EVP_unload_gost(void)
 }
 #endif /* USE_GOST */
 
+#ifdef USE_DSA
 /* Retrieve params as BIGNUM from raw buffer */
 static int
 sldns_key_dsa_buf_bignum(unsigned char* key, size_t len, BIGNUM** p,
@@ -370,6 +371,7 @@ EVP_PKEY *sldns_key_dsa2pkey_raw(unsigned char* key, size_t len)
        return evp_key;
 #endif
 }
+#endif /* USE_DSA */
 
 /* Retrieve params as BIGNUM from raw buffer, n is modulus, e is exponent */
 static int