From 1df8570a66b401e20d42eeca0752c92fd0eb6e19 Mon Sep 17 00:00:00 2001
From: Henrik Andersson <henrik.4e@gmail.com>
Date: Fri, 14 Mar 2014 09:11:10 +0100
Subject: [PATCH] Add fence against using EVP_sha256 mech.

Which is only available in >=0.9.8
---
 src/tools/pkcs11-tool.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/tools/pkcs11-tool.c b/src/tools/pkcs11-tool.c
index 8744c580..3f5d1f1b 100644
--- a/src/tools/pkcs11-tool.c
+++ b/src/tools/pkcs11-tool.c
@@ -3298,7 +3298,9 @@ static int sign_verify_openssl(CK_SESSION_HANDLE session,
 		EVP_sha1(),
 		EVP_md5(),
 		EVP_ripemd160(),
+#if OPENSSL_VERSION_NUMBER >= 0x00908000L
 		EVP_sha256(),
+#endif
 	};
 #endif
 
@@ -3375,7 +3377,9 @@ static int test_signature(CK_SESSION_HANDLE sess)
 		CKM_SHA1_RSA_PKCS,
 		CKM_MD5_RSA_PKCS,
 		CKM_RIPEMD160_RSA_PKCS,
+#if OPENSSL_VERSION_NUMBER >= 0x00908000L
 		CKM_SHA256_RSA_PKCS,
+#endif
 		0xffffff
 	};
 	size_t mechTypes_num = sizeof(mechTypes)/sizeof(CK_MECHANISM_TYPE);