From 0f56057c64af1ea0ccf059f9100e0a64676d1341 Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Mon, 17 Aug 2015 21:35:44 +0300 Subject: [PATCH] BoringSSL: Make SSL_set_ssl_method() conditional on EAP-FAST This function does not seem to be available in BoringSSL. Since it is needed for EAP-FAST (which is not currently working with BoringSSL), address this by commenting out the EAP-FAST specific step from builds that do not include EAP-FAST support. Signed-off-by: Jouni Malinen --- src/crypto/tls_openssl.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c index 5daf9ff22..1401c8c8e 100644 --- a/src/crypto/tls_openssl.c +++ b/src/crypto/tls_openssl.c @@ -3666,6 +3666,7 @@ int tls_connection_set_params(void *tls_ctx, struct tls_connection *conn, if (can_pkcs11 == 2 && !engine_id) engine_id = "pkcs11"; +#if defined(EAP_FAST) || defined(EAP_FAST_DYNAMIC) || defined(EAP_SERVER_FAST) #if OPENSSL_VERSION_NUMBER < 0x10100000L if (params->flags & TLS_CONN_EAP_FAST) { wpa_printf(MSG_DEBUG, @@ -3677,6 +3678,7 @@ int tls_connection_set_params(void *tls_ctx, struct tls_connection *conn, } } #endif +#endif /* EAP_FAST || EAP_FAST_DYNAMIC || EAP_SERVER_FAST */ while ((err = ERR_get_error())) { wpa_printf(MSG_INFO, "%s: Clearing pending SSL error: %s",