From 1e3496f26a5571c1f9c468d0f2ef119a9ddaf8c1 Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Thu, 4 May 2006 22:18:38 +0000 Subject: [PATCH] Don't try to compile SSL CRL support if local SSL installation hasn't got it. Per buildfarm failure on 'canary'. --- src/backend/libpq/be-secure.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/backend/libpq/be-secure.c b/src/backend/libpq/be-secure.c index 93e7f0e70f..93f5d16825 100644 --- a/src/backend/libpq/be-secure.c +++ b/src/backend/libpq/be-secure.c @@ -11,7 +11,7 @@ * * * IDENTIFICATION - * $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.66 2006/04/27 15:35:15 momjian Exp $ + * $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.67 2006/05/04 22:18:38 tgl Exp $ * * Since the server static private key ($DataDir/server.key) * will normally be stored unencrypted so that the database @@ -795,6 +795,7 @@ initialize_SSL(void) } else { +#ifdef X509_V_FLAG_CRL_CHECK /* * Check the Certificate Revocation List (CRL) if file exists. * http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci803160,00.html @@ -816,6 +817,7 @@ initialize_SSL(void) errdetail("Will not check certificates against CRL."))); } } +#endif /* X509_V_FLAG_CRL_CHECK */ SSL_CTX_set_verify(SSL_context, (SSL_VERIFY_PEER | -- 2.11.0