From 6af914a15c0c33e8b5bab5ca61919b8562ff1db9 Mon Sep 17 00:00:00 2001
From: Damien Miller <djm@mindrot.org>
Date: Fri, 10 Sep 2010 11:39:26 +1000
Subject:  - (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h
 kexecdh.c]    [kexecdhc.c kexecdhs.c key.c key.h myproposal.h packet.c
 readconf.c]    [ssh-agent.c ssh-ecdsa.c ssh-keygen.c ssh.c] Disable ECDH and
 ECDSA on    platforms that don't have the requisite OpenSSL support. ok
 dtucker@

---
 kexecdhc.c | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

(limited to 'kexecdhc.c')

diff --git a/kexecdhc.c b/kexecdhc.c
index 7ac7b1ee2..297a0e5a9 100644
--- a/kexecdhc.c
+++ b/kexecdhc.c
@@ -32,8 +32,6 @@
 #include <string.h>
 #include <signal.h>
 
-#include <openssl/ecdh.h>
-
 #include "xmalloc.h"
 #include "buffer.h"
 #include "key.h"
@@ -44,6 +42,10 @@
 #include "dh.h"
 #include "ssh2.h"
 
+#ifdef OPENSSL_HAS_ECC
+
+#include <openssl/ecdh.h>
+
 void
 kexecdh_client(Kex *kex)
 {
@@ -156,3 +158,10 @@ kexecdh_client(Kex *kex)
 	BN_clear_free(shared_secret);
 	kex_finish(kex);
 }
+#else /* OPENSSL_HAS_ECC */
+void
+kexecdh_client(Kex *kex)
+{
+	fatal("ECC support is not enabled");
+}
+#endif /* OPENSSL_HAS_ECC */
-- 
cgit v1.2.3