From 2e1c06b4527776f123344d8f1a19914289e1784f Mon Sep 17 00:00:00 2001 From: Scott Cantor Date: Wed, 11 Jan 2012 18:55:02 +0000 Subject: [PATCH] Check for OpenSSL error code for < 0.9.8 --- xmltooling/security/impl/PKIXPathValidator.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/xmltooling/security/impl/PKIXPathValidator.cpp b/xmltooling/security/impl/PKIXPathValidator.cpp index cc9eb45..3a86057 100644 --- a/xmltooling/security/impl/PKIXPathValidator.cpp +++ b/xmltooling/security/impl/PKIXPathValidator.cpp @@ -406,7 +406,7 @@ bool PKIXPathValidator::validate(X509* EE, STACK_OF(X509)* untrusted, const Path if (ret == 1) { m_log.debug("successfully validated certificate chain"); } -#if (OPENSSL_VERSION_NUMBER < 0x10000000L) +#if defined(X509_V_ERR_NO_EXPLICIT_POLICY) && (OPENSSL_VERSION_NUMBER < 0x10000000L) else if (X509_STORE_CTX_get_error(&ctx) == X509_V_ERR_NO_EXPLICIT_POLICY && !pkixParams->isPolicyMappingInhibited()) { m_log.warn("policy mapping requires OpenSSL 1.0.0 or later"); } -- 2.1.4