- Fix #942: 1.18.0 libunbound DNS regression when built without

  OpenSSL.

diff --git a/doc/Changelog b/doc/Changelog
index 1ff496d82f2927f1919eae9228834aa975b41661..9b3ccf8ea8266cc6db3efe3dccb5cf95e020cb17 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,7 @@
+22 September 2023: Wouter
+       - Fix #942: 1.18.0 libunbound DNS regression when built without
+         OpenSSL.
+
 18 September 2023: Wouter
        - Fix rpz tcp-only action with rpz triggers nsdname and nsip.
 

diff --git a/libunbound/libworker.c b/libunbound/libworker.c
index 104244937bf0534e710d623250c2ed1a55ca5737..865c71438c039a93ad1100ca3b877c6ef4f83e4c 100644 (file)
--- a/libunbound/libworker.c
+++ b/libunbound/libworker.c
@@ -168,6 +168,7 @@ libworker_setup(struct ub_ctx* ctx, int is_bg, struct ub_event_base* eb)
                hints_delete(w->env->hints);
                w->env->hints = NULL;
        }
+#ifdef HAVE_SSL
        w->sslctx = connect_sslctx_create(NULL, NULL,
                cfg->tls_cert_bundle, cfg->tls_win_cert);
        if(!w->sslctx) {
@@ -175,6 +176,7 @@ libworker_setup(struct ub_ctx* ctx, int is_bg, struct ub_event_base* eb)
                hints_delete(w->env->hints);
                w->env->hints = NULL;
        }
+#endif
        if(!w->is_bg || w->is_bg_thread) {
                lock_basic_unlock(&ctx->cfglock);
        }