From: Darren Tucker <dtucker@dtucker.net>
Date: Wed, 12 Nov 2025 22:53:17 +0000 (+1100)
Subject: Don't use OpenSSL's ed25519 if built without EC.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=08786bbe7eebff316efb0b4ccb882f93f33a16b8;p=thirdparty%2Fopenssh-portable.git

Don't use OpenSSL's ed25519 if built without EC.

Explicitly check for OPENSSL_NO_EC, since otherwise the test will link
but then fail at runtime.
---

diff --git a/configure.ac b/configure.ac
index 86cf56689..f7e9d4184 100644
--- a/configure.ac
+++ b/configure.ac
@@ -3357,6 +3357,10 @@ if test "x$openssl" = "xyes" ; then
 		[AC_LANG_PROGRAM([[
 	#include <string.h>
 	#include <openssl/evp.h>
+	#include <openssl/opensslconf.h>
+	#ifdef OPENSSL_NO_EC
+	# error "OpenSSL has no EC support."
+	#endif
 		]], [[
 		unsigned char buf[64];
 		memset(buf, 0, sizeof(buf));