support --without-openssl at configure time

Disables and removes dependency on OpenSSL. Many features don't
work and the set of crypto options is greatly restricted. This
will only work on system with native arc4random or /dev/urandom.

Considered highly experimental for now.

1 files changed, 3 insertions, 0 deletions

diff --git a/krl.c b/krl.c
index 3917338f9..b19def79f 100644
--- a/krl.c
+++ b/krl.c
@@ -18,6 +18,8 @@
 
 #include "includes.h"
 
+#ifdef WITH_OPENSSL /* XXX just fix bignums and this is good */
+
 #include <sys/types.h>
 #include <sys/param.h>
 #include <openbsd-compat/sys-tree.h>
@@ -1282,3 +1284,4 @@ ssh_krl_file_contains_key(const char *path, const struct sshkey *key)
                 errno = oerrno;
         return r;
 }
+#endif /* WITH_OPENSSL */