From 71f9b41c7fa1a5700f196bb4f4fee255b986ff4d Mon Sep 17 00:00:00 2001
From: Sergey Kandaurov <pluknet@nginx.com>
Date: Tue, 22 Dec 2020 12:03:43 +0300
Subject: [PATCH] QUIC: fixed build with OpenSSL < 1.1.1.

The <openssl/kdf.h> header is available since OpenSSL 1.1.0, and HKDF API
used for separate Extract and Expand steps in TLSv1.3 - since OpenSSL 1.1.1.
---
 src/event/ngx_event_openssl.h | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/event/ngx_event_openssl.h b/src/event/ngx_event_openssl.h
index afccb52d7..3a0bbfdba 100644
--- a/src/event/ngx_event_openssl.h
+++ b/src/event/ngx_event_openssl.h
@@ -23,12 +23,14 @@
 #include <openssl/engine.h>
 #endif
 #include <openssl/evp.h>
+#if (NGX_QUIC)
 #ifdef OPENSSL_IS_BORINGSSL
 #include <openssl/hkdf.h>
 #include <openssl/chacha.h>
 #else
 #include <openssl/kdf.h>
 #endif
+#endif
 #include <openssl/hmac.h>
 #ifndef OPENSSL_NO_OCSP
 #include <openssl/ocsp.h>