From 0f4a4d46abe13df2c367aa8dffaad685c20eaada Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Fri, 4 Apr 2008 22:10:49 +0000
Subject: [PATCH] 2357.   [port]          Don't use OpenSSL's engine support in
 versions before                         OpenSSL 0.9.7f. [RT #17922]

---
 CHANGES                | 3 +++
 lib/dns/openssl_link.c | 4 ++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/CHANGES b/CHANGES
index b020e34ad0..142f977fab 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+2357.	[port]		Don't use OpenSSL's engine support in versions before
+			OpenSSL 0.9.7f. [RT #17922]
+
 2356.	[bug]		Builtin mutex profiler was not scalable enough.
 			[RT #17436]
 
diff --git a/lib/dns/openssl_link.c b/lib/dns/openssl_link.c
index 6fc6784c66..a5d0cca829 100644
--- a/lib/dns/openssl_link.c
+++ b/lib/dns/openssl_link.c
@@ -31,7 +31,7 @@
 
 /*
  * Principal Author: Brian Wellington
- * $Id: openssl_link.c,v 1.19 2008/04/02 23:46:57 tbox Exp $
+ * $Id: openssl_link.c,v 1.20 2008/04/04 22:10:49 marka Exp $
  */
 #ifdef OPENSSL
 
@@ -54,7 +54,7 @@
 #include <openssl/conf.h>
 #include <openssl/crypto.h>
 
-#if defined(CRYPTO_LOCK_ENGINE) && (OPENSSL_VERSION_NUMBER != 0x00907000L)
+#if defined(CRYPTO_LOCK_ENGINE) && (OPENSSL_VERSION_NUMBER >= 0x0090707f)
 #define USE_ENGINE 1
 #endif