From e36fd79f212a4fbcb69ef6fa6add4d06e52956b5 Mon Sep 17 00:00:00 2001
From: Laurent Bercot <ska-skaware@skarnet.org>
Date: Tue, 1 Jun 2021 20:35:49 +0000
Subject:  Make stuff build

 Still not working: we need to add servername to the storage
---
 src/sbearssl/sbearssl_sni_policy_vtable.c | 22 ++++++++++++++++++----
 1 file changed, 18 insertions(+), 4 deletions(-)

(limited to 'src/sbearssl/sbearssl_sni_policy_vtable.c')

diff --git a/src/sbearssl/sbearssl_sni_policy_vtable.c b/src/sbearssl/sbearssl_sni_policy_vtable.c
index eca198a..dc18805 100644
--- a/src/sbearssl/sbearssl_sni_policy_vtable.c
+++ b/src/sbearssl/sbearssl_sni_policy_vtable.c
@@ -6,7 +6,9 @@
 #include <bearssl.h>
 
 #include <skalibs/bytestr.h>
-#include <skalibs/strerr2.h>
+#ifdef DEBUG
+# include <skalibs/strerr2.h>
+#endif
 #include <skalibs/stralloc.h>
 #include <skalibs/genalloc.h>
 #include <skalibs/avltree.h>
@@ -105,10 +107,22 @@ static int choose (br_ssl_server_policy_class const **pctx, br_ssl_server_contex
       int r = sbearssl_ec_issuer_keytype(&kt, &choices->chain[0]) ;
       switch (r)
       {
-        case -2 : strerr_warnw3x("certificate issuer key type not recognized", servername[0] ? " for name " : "", servername[0] ? servername : "") ; return 0 ;
-        case -1 : strerr_warnwu3sys("get certificate issuer key type", servername[0] ? " for name " : "", servername[0] ? servername : "") ; return 0 ;
+        case -2 :
+#ifdef DEBUG
+          strerr_warnw3x("certificate issuer key type not recognized", servername[0] ? " for name " : "", servername[0] ? servername : "") ;
+#endif
+          return 0 ;
+        case -1 :
+#ifdef DEBUG
+          strerr_warnwu3sys("get certificate issuer key type", servername[0] ? " for name " : "", servername[0] ? servername : "") ;
+#endif
+          return 0 ;
         case 0 : break ;
-        default : strerr_warnwu5x("get certificate issuer key type", servername[0] ? " for name " : "", servername[0] ? servername : "", ": ", sbearssl_error_str(r)) ; return 0 ;
+        default :
+#ifdef DEBUG
+          strerr_warnwu5x("get certificate issuer key type", servername[0] ? " for name " : "", servername[0] ? servername : "", ": ", sbearssl_error_str(r)) ;
+#endif
+          return 0 ;
       }
       if (!sbearssl_choose_algos_ec(sc, choices, BR_KEYTYPE_KEYX | BR_KEYTYPE_SIGN, kt)) return 0 ;
       pol->keyx.ec = sc->eng.iec ;  /* the br_ssl_engine_get_ec() abstraction lacks a const */
-- 
cgit v1.3.1