4881. [bug] Only include dst_openssl.h when OpenSSL is required.

                        [RT #47068]

(cherry picked from commit a64503c7361e6629822428b0455ee98bbda75bf0)

diff --git a/CHANGES b/CHANGES
index f0706433390cb08c94428ca99d970010026747f0..1db4cc6d46ed33b6ab11480c9432d8532be243a9 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+4881.  [bug]           Only include dst_openssl.h when OpenSSL is required.
+                       [RT #47068]
+
 4879.  [bug]           dns_rdata_caa:value_len is was small. [RT #47086]
 
 4878.  [bug]           List 'ply' as a requirement for the 'isc' python

diff --git a/lib/dns/hmac_link.c b/lib/dns/hmac_link.c
index b8473793f532275f6d8da62a0e2426e73daeafea..d4df150c75506f493c3d7a408076a33d3a7e416e 100644 (file)
--- a/lib/dns/hmac_link.c
+++ b/lib/dns/hmac_link.c
@@ -50,7 +50,9 @@
 #include <dst/result.h>
 
 #include "dst_internal.h"
-#include "dst_openssl.h"
+#ifdef HAVE_FIPS_MODE
+#include "dst_openssl.h"       /* FIPS_mode() prototype */
+#endif
 #include "dst_parse.h"
 
 #ifndef PK11_MD5_DISABLE