Only build pkinit plugin if a sufficiently recent version of OpenSSL …

…is available

ticket: 5617

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@19758 dc483132-0cff-0310-8789-dd5450dbe970

src/configure.in

@@ -920,9 +920,19 @@ changequote([, ])
 AC_SUBST(PASS)
 
 dnl for pkinit
+AC_CACHE_CHECK(for a recent enough OpenSSL, k5_cv_openssl_version_okay,
+[AC_COMPILE_IFELSE([#include <openssl/opensslv.h>
+#if OPENSSL_VERSION_NUMBER < 0x00908000L
+# error openssl is too old, need 0.9.8
+#endif
+int i = 1;
+], k5_cv_openssl_version_okay=yes, k5_cv_openssl_version_okay=no)])
 old_LIBS="$LIBS"
 AC_CHECK_LIB(crypto, PKCS7_get_signer_info)
 LIBS="$old_LIBS"
+if test "$k5_cv_openssl_version_okay" = yes; then
+  K5_GEN_MAKEFILE(plugins/preauth/pkinit)
+fi
 
 dnl for lib/apputils
 AC_REPLACE_FUNCS(daemon)
@@ -1095,7 +1105,6 @@ V5_AC_OUTPUT_MAKEFILE(.
 	plugins/kdb/db2/libdb2/test
 	plugins/preauth/cksum_body
 	plugins/preauth/wpse
-	plugins/preauth/pkinit
 
 	clients clients/klist clients/kinit clients/kvno
 	clients/kdestroy clients/kpasswd clients/ksu