From: Marcel Raad <Marcel.Raad@teamviewer.com>
Date: Mon, 11 Oct 2021 19:07:26 +0000 (+0200)
Subject: openssl: remove `RSA_METHOD_FLAG_NO_CHECK` handling if unavailable
X-Git-Tag: curl-7_81_0~148
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=6147dfab93b434f49cc927babc4e9135071f7f13;p=thirdparty%2Fcurl.git

openssl: remove `RSA_METHOD_FLAG_NO_CHECK` handling if unavailable

The flag has been deprecated without replacement in OpenSSL 3.0.

Closes https://github.com/curl/curl/pull/7893
---

diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c
index 947c14f5cd..cba6491ab9 100644
--- a/lib/vtls/openssl.c
+++ b/lib/vtls/openssl.c
@@ -1103,7 +1103,8 @@ int cert_stuff(struct Curl_easy *data,
       EVP_PKEY_free(pktmp);
     }
 
-#if !defined(OPENSSL_NO_RSA) && !defined(OPENSSL_IS_BORINGSSL)
+#if !defined(OPENSSL_NO_RSA) && !defined(OPENSSL_IS_BORINGSSL) && \
+    !defined(OPENSSL_NO_DEPRECATED_3_0)
     {
       /* If RSA is used, don't check the private key if its flags indicate
        * it doesn't support it. */