- (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h kexecdh.c]

   [kexecdhc.c kexecdhs.c key.c key.h myproposal.h packet.c readconf.c]
   [ssh-agent.c ssh-ecdsa.c ssh-keygen.c ssh.c] Disable ECDH and ECDSA on
   platforms that don't have the requisite OpenSSL support. ok dtucker@

1 files changed, 2 insertions, 0 deletions

diff --git a/authfd.c b/authfd.c
index ec537d2e9..c11c3f5a8 100644
--- a/authfd.c
+++ b/authfd.c
@@ -509,6 +509,7 @@ ssh_encode_identity_ssh2(Buffer *b, Key *key, const char *comment)
                     buffer_len(&key->cert->certblob));
                 buffer_put_bignum2(b, key->dsa->priv_key);
                 break;
+#ifdef OPENSSL_HAS_ECC
         case KEY_ECDSA:
                 buffer_put_cstring(b, key_curve_nid_to_name(key->ecdsa_nid));
                 buffer_put_ecpoint(b, EC_KEY_get0_group(key->ecdsa),
@@ -522,6 +523,7 @@ ssh_encode_identity_ssh2(Buffer *b, Key *key, const char *comment)
                     buffer_len(&key->cert->certblob));
                 buffer_put_bignum2(b, EC_KEY_get0_private_key(key->ecdsa));
                 break;
+#endif
         }
         buffer_put_cstring(b, comment);
 }