From: Quanah Gibson-Mount <quanah@openldap.org>
Date: Tue, 18 Apr 2017 20:40:05 +0000 (-0700)
Subject: Fix autoca build with OpenSSL 1.1.0
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=87f3477626cac8dc09dafdff2f465baa2f8a7095;p=openldap

Fix autoca build with OpenSSL 1.1.0
---

diff --git a/servers/slapd/overlays/autoca.c b/servers/slapd/overlays/autoca.c
index a72e798a01..bcd62898a2 100644
--- a/servers/slapd/overlays/autoca.c
+++ b/servers/slapd/overlays/autoca.c
@@ -37,6 +37,15 @@
 #include <openssl/x509v3.h>
 #include <openssl/evp.h>
 
+/* Starting with OpenSSL 1.1.0, rsa.h is no longer included in
+ * x509.h, so we need to explicitly include it for the
+ * call to EVP_PKEY_CTX_set_rsa_keygen_bits
+ */
+
+#if OPENSSL_VERSION_NUMBER >= 0x10100000
+#include <openssl/rsa.h>
+#endif
+
 /* This overlay implements a certificate authority that can generate
  * certificates automatically for any entry in the directory.
  * On startup it generates a self-signed CA cert for the directory's