From ac1f960d4ac4345b5ec2f766cdc69e47632136d6 Mon Sep 17 00:00:00 2001
From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Fri, 20 May 2016 15:01:49 +0200
Subject: Allow for conditional compilation of SSL 2.0 client hello support

This allows to completely remove SSL 2.0 support by calling configure
with the '--disable-ssl2-support' option.

Relates #97
---
 m4/hooks.m4 | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

(limited to 'm4')

diff --git a/m4/hooks.m4 b/m4/hooks.m4
index 9d057951d9..08499cdcd9 100644
--- a/m4/hooks.m4
+++ b/m4/hooks.m4
@@ -155,6 +155,21 @@ LIBTASN1_MINIMUM=4.3
   fi
   AM_CONDITIONAL(ENABLE_SSL3, test "$ac_enable_ssl3" != "no")
 
+  ac_enable_ssl2=yes
+  AC_MSG_CHECKING([whether to disable the SSL 2.0 client hello])
+  AC_ARG_ENABLE(ssl2-support,
+    AS_HELP_STRING([--disable-ssl2-support],
+                   [disable support for the SSL 2.0 client hello]),
+    ac_enable_ssl2=$enableval)
+  if test x$ac_enable_ssl2 != xno; then
+   AC_MSG_RESULT(no)
+   AC_DEFINE([ENABLE_SSL2], 1, [enable SSL2.0 support for client hello])
+  else
+   ac_full=0
+   AC_MSG_RESULT(yes)
+  fi
+  AM_CONDITIONAL(ENABLE_SSL3, test "$ac_enable_ssl2" != "no")
+
   ac_enable_srtp=yes
   AC_MSG_CHECKING([whether to disable DTLS-SRTP extension])
   AC_ARG_ENABLE(dtls-srtp-support,
-- 
cgit v1.2.1