- (dtucker) Enable sha256 kex methods based on the presence of the necessary

   functions, not from the openssl version.

2 files changed, 5 insertions, 1 deletions

diff --git a/ChangeLog b/ChangeLog
index 555fede35..ad5b66a78 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+20130605
+ - (dtucker) Enable sha256 kex methods based on the presence of the necessary
+   functions, not from the openssl version.
+
 20130602
  - (tim) [Makefile.in] Make Solaris, UnixWare, & OpenServer linkers happy
    linking regress/modpipe.
diff --git a/myproposal.h b/myproposal.h
index 99d093461..f13c74850 100644
--- a/myproposal.h
+++ b/myproposal.h
@@ -46,7 +46,7 @@
 #endif
 
 /* Old OpenSSL doesn't support what we need for DHGEX-sha256 */
-#if OPENSSL_VERSION_NUMBER >= 0x00907000L
+#ifdef HAVE_EVP_SHA256
 # define KEX_SHA256_METHODS \
         "diffie-hellman-group-exchange-sha256,"
 #else