--- /dev/null
+diff -urN cryptography-1.7.2.orig/src/_cffi_src/openssl/x509_vfy.py cryptography-1.7.2/src/_cffi_src/openssl/x509_vfy.py
+--- cryptography-1.7.2.orig/src/_cffi_src/openssl/x509_vfy.py 2017-01-27 15:09:52.000000000 +0000
++++ cryptography-1.7.2/src/_cffi_src/openssl/x509_vfy.py 2017-02-26 15:15:09.889855740 +0000
+@@ -221,10 +221,12 @@
+ static const long X509_V_ERR_SUITE_B_INVALID_SIGNATURE_ALGORITHM = 0;
+ static const long X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED = 0;
+ static const long X509_V_ERR_SUITE_B_CANNOT_SIGN_P_384_WITH_P_256 = 0;
++#ifndef X509_V_ERR_HOSTNAME_MISMATCH
+ static const long X509_V_ERR_HOSTNAME_MISMATCH = 0;
+ static const long X509_V_ERR_EMAIL_MISMATCH = 0;
+ static const long X509_V_ERR_IP_ADDRESS_MISMATCH = 0;
+ #endif
++#endif
+
+ /* OpenSSL 1.0.2beta2+ verification parameters */
+ #if CRYPTOGRAPHY_OPENSSL_102BETA2_OR_GREATER && \