From: William Lallemand <wlallemand@haproxy.com>
Date: Tue, 21 Jul 2026 13:06:20 +0000 (+0200)
Subject: BUILD: Makefile: error when trying to build with aws-lc with the wrong flags
X-Git-Url: http://git.kaiwu.me/postgresql/log/contrib/postgres_fdw/doc/hash.html?a=commitdiff_plain;h=a0ca7b619862189ac342afe2fb445926b3c7d20b;p=haproxy.git

BUILD: Makefile: error when trying to build with aws-lc with the wrong flags

USE_OPENSSL_AWSLC=1 is required when trying to build with aws-lc. This
was already required before, but kind of worked without it since
f76e8e50f460 ("BUILD: ssl: replace USE_OPENSSL_AWSLC by
OPENSSL_IS_AWSLC").

However since 9ac590b5 ("MEDIUM: ssl: introduce src/fips.c with TLS
version check"), this can't work by accident anymore.

This patch emits an error when we find OPENSSL_IS_AWSLC, but we didn't
found USE_OPENSSL_AWSLC=1.
---

diff --git a/include/haproxy/openssl-compat.h b/include/haproxy/openssl-compat.h
index fb859263e..efdfee343 100644
--- a/include/haproxy/openssl-compat.h
+++ b/include/haproxy/openssl-compat.h
@@ -23,6 +23,13 @@
 #include <openssl/rand.h>
 #include <openssl/hmac.h>
 #include <openssl/rsa.h>
+
+#ifdef OPENSSL_IS_AWSLC
+#if !defined(USE_OPENSSL_AWSLC)
+#error "AWSLC detected but USE_OPENSSL_AWSLC=1 is not set on the make line"
+#endif
+#endif
+
 #if (defined SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB && !defined OPENSSL_NO_OCSP)
 #include <openssl/ocsp.h>
 #endif