support --without-openssl at configure time
Disables and removes dependency on OpenSSL. Many features don't
work and the set of crypto options is greatly restricted. This
will only work on system with native arc4random or /dev/urandom.
Considered highly experimental for now.
diff --git a/kexecdhs.c b/kexecdhs.c
index 2700b72..48bc56d 100644
--- a/kexecdhs.c
+++ b/kexecdhs.c
@@ -26,6 +26,8 @@
#include "includes.h"
+#if defined(WITH_OPENSSL) && defined(OPENSSL_HAS_ECC)
+
#include <sys/types.h>
#include <string.h>
#include <signal.h>
@@ -39,8 +41,6 @@
#include "packet.h"
#include "ssh2.h"
-#ifdef OPENSSL_HAS_ECC
-
#include <openssl/ecdh.h>
void
@@ -152,10 +152,4 @@
BN_clear_free(shared_secret);
kex_finish(kex);
}
-#else /* OPENSSL_HAS_ECC */
-void
-kexecdh_server(Kex *kex)
-{
- fatal("ECC support is not enabled");
-}
-#endif /* OPENSSL_HAS_ECC */
+#endif /* defined(WITH_OPENSSL) && defined(OPENSSL_HAS_ECC) */