From 8a379e3b7428729fc5736ce702e9127c48c004f8 Mon Sep 17 00:00:00 2001
From: Patrick McDermott <patrick.mcdermott@libiquity.com>
Date: Tue, 30 Jul 2019 18:04:56 -0400
Subject: s_client: Require HAVE_CRL_IO for CRL

For some reason this causes the expiry test to fail:

	FAIL: tests/badssl.sh 1 - not expired
	PASS: tests/badssl.sh 2 - not wrong.host
	PASS: tests/badssl.sh 3 - not self-signed
	PASS: tests/badssl.sh 4 - not untrusted-root
	PASS: tests/badssl.sh 5 - not revoked
	PASS: tests/badssl.sh 6 -     no-common-name
	FAIL: tests/badssl.sh 7 -     no-subject
	PASS: tests/badssl.sh 8 - not incomplete-chain
	XFAIL: tests/badssl.sh 9 - not sha1-intermediate # TODO
	PASS: tests/badssl.sh 10 -     sha256
	PASS: tests/badssl.sh 11 -     sha384
	PASS: tests/badssl.sh 12 -     sha512
	PASS: tests/badssl.sh 13 - not 1000-sans
	PASS: tests/badssl.sh 14 - not 10000-sans
	PASS: tests/badssl.sh 15 -     ecc256
	PASS: tests/badssl.sh 16 -     ecc384
	PASS: tests/badssl.sh 17 -     rsa2048
	PASS: tests/badssl.sh 18 -     rsa4096
	PASS: tests/badssl.sh 19 - not rsa8192
	PASS: tests/badssl.sh 20 -     extended-validation
	PASS: tests/badssl.sh 21 - not http
	PASS: tests/badssl.sh 22 - not cbc
	PASS: tests/badssl.sh 23 - not rc4-md5
	PASS: tests/badssl.sh 24 - not rc4
	PASS: tests/badssl.sh 25 - not 3des
	PASS: tests/badssl.sh 26 - not null
	XFAIL: tests/badssl.sh 27 - not mozilla-old # TODO
	PASS: tests/badssl.sh 28 -     mozilla-intermediate
	PASS: tests/badssl.sh 29 -     mozilla-modern
	PASS: tests/badssl.sh 30 - not dh480
	PASS: tests/badssl.sh 31 - not dh512
	PASS: tests/badssl.sh 32 - not dh1024
	PASS: tests/badssl.sh 33 -     dh2048
	XFAIL: tests/badssl.sh 34 - not dh-small-subgroup # TODO
	PASS: tests/badssl.sh 35 - not dh-compsite
	PASS: tests/badssl.sh 36 - not static-rsa
	PASS: tests/badssl.sh 37 - not tls-v1-0
	PASS: tests/badssl.sh 38 - not tls-v1-1
	PASS: tests/badssl.sh 39 -     tls-v1-2
	============================================================================
	Testsuite summary for Unofficial wolfSSL Utility 0.1.0
	(33-gb52e29a-dirty)
	============================================================================
	# TOTAL: 39
	# PASS:  34
	# SKIP:  0
	# XFAIL: 3
	# FAIL:  2
	# XPASS: 0
	# ERROR: 0
	============================================================================
	See ./test-suite.log
	Please report to mailto:patrick.mcdermott@libiquity.com
	============================================================================
---
(limited to 'src')

diff --git a/src/s_client.c b/src/s_client.c
index 37c5935..79f8f25 100644
--- a/src/s_client.c
+++ b/src/s_client.c
@@ -322,7 +322,7 @@ s_client(int argc, char **argv)
 
 	(void) servername;
 	if (
-#ifdef HAVE_CRL
+#if defined(HAVE_CRL) && defined(HAVE_CRL_IO)
 			wolfSSL_CTX_EnableCRL(ctx, WOLFSSL_CRL_CHECKALL) !=
 				WOLFSSL_SUCCESS ||
 #endif
--
cgit v0.9.1