Don't try to compile SSL CRL support if local SSL installation hasn't
authorTom Lane <tgl@sss.pgh.pa.us>
Thu, 4 May 2006 22:18:38 +0000 (22:18 +0000)
committerTom Lane <tgl@sss.pgh.pa.us>
Thu, 4 May 2006 22:18:38 +0000 (22:18 +0000)
got it.  Per buildfarm failure on 'canary'.

src/backend/libpq/be-secure.c

index 93e7f0e70f75851cea599b10315d1195fbe8bdbe..93f5d16825091e5a094a91b35f446349e5f32db1 100644 (file)
@@ -11,7 +11,7 @@
  *
  *
  * IDENTIFICATION
- *   $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.66 2006/04/27 15:35:15 momjian Exp $
+ *   $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.67 2006/05/04 22:18:38 tgl Exp $
  *
  *   Since the server static private key ($DataDir/server.key)
  *   will normally be stored unencrypted so that the database
@@ -795,6 +795,7 @@ initialize_SSL(void)
    }
    else
    {
+#ifdef X509_V_FLAG_CRL_CHECK
        /*
         *  Check the Certificate Revocation List (CRL) if file exists.
         *  http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci803160,00.html
@@ -816,6 +817,7 @@ initialize_SSL(void)
                     errdetail("Will not check certificates against CRL.")));
            }
        }
+#endif /* X509_V_FLAG_CRL_CHECK */
 
        SSL_CTX_set_verify(SSL_context,
                           (SSL_VERIFY_PEER |