Only build pkinit plugin if a sufficiently recent version of OpenSSL is available

ticket: 5617

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19758 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/configure.in b/src/configure.in
index d94786e50a3ab138ba62a00c3a262df1ac2fb42b..57b9ca95acb0e53b34c2971f9bece31137bf6080 100644 (file)
--- a/src/configure.in
+++ b/src/configure.in
@@ -920,9 +920,19 @@ changequote([, ])
 AC_SUBST(PASS)
 
 dnl for pkinit
+AC_CACHE_CHECK(for a recent enough OpenSSL, k5_cv_openssl_version_okay,
+[AC_COMPILE_IFELSE([#include <openssl/opensslv.h>
+#if OPENSSL_VERSION_NUMBER < 0x00908000L
+# error openssl is too old, need 0.9.8
+#endif
+int i = 1;
+], k5_cv_openssl_version_okay=yes, k5_cv_openssl_version_okay=no)])
 old_LIBS="$LIBS"
 AC_CHECK_LIB(crypto, PKCS7_get_signer_info)
 LIBS="$old_LIBS"
+if test "$k5_cv_openssl_version_okay" = yes; then
+  K5_GEN_MAKEFILE(plugins/preauth/pkinit)
+fi
 
 dnl for lib/apputils
 AC_REPLACE_FUNCS(daemon)
@@ -1095,7 +1105,6 @@ V5_AC_OUTPUT_MAKEFILE(.
        plugins/kdb/db2/libdb2/test
        plugins/preauth/cksum_body
        plugins/preauth/wpse
-       plugins/preauth/pkinit
 
        clients clients/klist clients/kinit clients/kvno
        clients/kdestroy clients/kpasswd clients/ksu