Skip to content

Commit 77dc8f1

Browse files
committed
Enable building with OpenSSL versions without newer OCSP error codes
1 parent e8f60b9 commit 77dc8f1

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

native/include/ssl_private.h

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -220,6 +220,19 @@ extern ENGINE *tcn_ssl_engine;
220220
#define OCSP_STATUS_UNKNOWN 2
221221
/* 15 minutes - aligns with JSSE */
222222
#define OCSP_MAX_SKEW 900
223+
/* Older versions of OpenSSL have a smaller range of OCSP error codes*/
224+
#if !defined(X509_V_ERR_OCSP_RESP_INVALID)
225+
#define X509_V_ERR_OCSP_RESP_INVALID 96
226+
#endif
227+
#if !defined(X509_V_ERR_OCSP_SIGNATURE_FAILURE)
228+
#define X509_V_ERR_OCSP_SIGNATURE_FAILURE 97
229+
#endif
230+
#if !defined(X509_V_ERR_OCSP_NOT_YET_VALID)
231+
#define X509_V_ERR_OCSP_NOT_YET_VALID 98
232+
#endif
233+
#if !defined(X509_V_ERR_OCSP_HAS_EXPIRED)
234+
#define X509_V_ERR_OCSP_HAS_EXPIRED 99
235+
#endif
223236
#endif
224237

225238
#endif /* !defined(OPENSSL_NO_TLSEXT) && defined(SSL_set_tlsext_host_name) */

0 commit comments

Comments
 (0)