From 1e3496f26a5571c1f9c468d0f2ef119a9ddaf8c1 Mon Sep 17 00:00:00 2001
From: Tom Lane <tgl@sss.pgh.pa.us>
Date: Thu, 4 May 2006 22:18:38 +0000
Subject: [PATCH] Don't try to compile SSL CRL support if local SSL
installation hasn't got it. Per buildfarm failure on 'canary'.
---
src/backend/libpq/be-secure.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/src/backend/libpq/be-secure.c b/src/backend/libpq/be-secure.c
index 93e7f0e70f7..93f5d168250 100644
--- a/src/backend/libpq/be-secure.c
+++ b/src/backend/libpq/be-secure.c
@@ -11,7 +11,7 @@
*
*
* IDENTIFICATION
- * $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.66 2006/04/27 15:35:15 momjian Exp $
+ * $PostgreSQL: pgsql/src/backend/libpq/be-secure.c,v 1.67 2006/05/04 22:18:38 tgl Exp $
*
* Since the server static private key ($DataDir/server.key)
* will normally be stored unencrypted so that the database
@@ -795,6 +795,7 @@ initialize_SSL(void)
}
else
{
+#ifdef X509_V_FLAG_CRL_CHECK
/*
* Check the Certificate Revocation List (CRL) if file exists.
* http://searchsecurity.techtarget.com/sDefinition/0,,sid14_gci803160,00.html
@@ -816,6 +817,7 @@ initialize_SSL(void)
errdetail("Will not check certificates against CRL.")));
}
}
+#endif /* X509_V_FLAG_CRL_CHECK */
SSL_CTX_set_verify(SSL_context,
(SSL_VERIFY_PEER |
--
GitLab