- (djm) [authfd.c authfile.c bufec.c buffer.h configure.ac kex.h kexecdh.c]
[kexecdhc.c kexecdhs.c key.c key.h myproposal.h packet.c readconf.c]
[ssh-agent.c ssh-ecdsa.c ssh-keygen.c ssh.c] Disable ECDH and ECDSA on
platforms that don't have the requisite OpenSSL support. ok dtucker@
diff --git a/kexecdhc.c b/kexecdhc.c
index 7ac7b1e..297a0e5 100644
--- a/kexecdhc.c
+++ b/kexecdhc.c
@@ -32,8 +32,6 @@
#include <string.h>
#include <signal.h>
-#include <openssl/ecdh.h>
-
#include "xmalloc.h"
#include "buffer.h"
#include "key.h"
@@ -44,6 +42,10 @@
#include "dh.h"
#include "ssh2.h"
+#ifdef OPENSSL_HAS_ECC
+
+#include <openssl/ecdh.h>
+
void
kexecdh_client(Kex *kex)
{
@@ -156,3 +158,10 @@
BN_clear_free(shared_secret);
kex_finish(kex);
}
+#else /* OPENSSL_HAS_ECC */
+void
+kexecdh_client(Kex *kex)
+{
+ fatal("ECC support is not enabled");
+}
+#endif /* OPENSSL_HAS_ECC */