From 75f34d140a4096ec87b7bc8aa503374d63dec61f Mon Sep 17 00:00:00 2001
From: Laurens Van Houtven <_@lvh.cc>
Date: Tue, 17 Jun 2014 14:31:19 +0200
Subject: Manually check for X509_V_FLAG_CHECK_SS_SIGNATURE

---
 cryptography/hazmat/bindings/openssl/x509_vfy.py | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/cryptography/hazmat/bindings/openssl/x509_vfy.py b/cryptography/hazmat/bindings/openssl/x509_vfy.py
index 88fc8bdd..4db3da1d 100644
--- a/cryptography/hazmat/bindings/openssl/x509_vfy.py
+++ b/cryptography/hazmat/bindings/openssl/x509_vfy.py
@@ -30,6 +30,7 @@ TYPES = """
 static const long Cryptography_HAS_X509_VERIFY_PARAM_SET_HOSTFLAGS;
 static const long Cryptography_HAS_102_VERIFICATION_PARAMS;
 static const long Cryptography_HAS_100_VERIFICATION_PARAMS;
+static const long Cryptography_HAS_X509_V_FLAG_CHECK_SS_SIGNATURE;
 
 typedef ... Cryptography_STACK_OF_ASN1_OBJECT;
 typedef ... X509_VERIFY_PARAM;
@@ -122,6 +123,13 @@ static const long Cryptography_HAS_100_VERIFICATION_PARAMS = 1;
 static const long Cryptography_HAS_100_VERIFICATION_PARAMS = 0;
 static const long X509_V_FLAG_EXTENDED_CRL_SUPPORT = 0;
 static const long X509_V_FLAG_USE_DELTAS = 0;
+#endif
+
+// OpenSSL 0.9.8recent+
+#ifdef X509_V_FLAG_CHECK_SS_SIGNATURE
+static const long Cryptography_HAS_X509_V_FLAG_CHECK_SS_SIGNATURE = 1;
+#else
+static const long Cryptography_HAS_X509_V_FLAG_CHECK_SS_SIGNATURE = 0;
 static const long X509_V_FLAG_CHECK_SS_SIGNATURE = 0;
 #endif
 """
@@ -146,6 +154,8 @@ CONDITIONAL_NAMES = {
         "Cryptography_HAS_100_VERIFICATION_PARAMS",
         "X509_V_FLAG_EXTENDED_CRL_SUPPORT",
         "X509_V_FLAG_USE_DELTAS",
+    ],
+    "Cryptography_HAS_X509_V_FLAG_CHECK_SS_SIGNATURE": [
         "X509_V_FLAG_CHECK_SS_SIGNATURE",
     ]
 }
-- 
cgit v1.2.3