SSL_TLS doesn't depend on PK any more
(But PK does depend on RSA or ECP.)
diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index dd31a64..e28c835 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -888,7 +888,9 @@
int handshake_failure = 0;
const int *ciphersuites;
const ssl_ciphersuite_t *ciphersuite_info;
+#if defined(POLARSSL_PK_C)
pk_type_t pk_alg;
+#endif
SSL_DEBUG_MSG( 2, ( "=> parse client hello" ) );
@@ -1301,11 +1303,13 @@
/* If ciphersuite requires us to have a private key of a
* certain type, make sure we do */
+#if defined(POLARSSL_PK_C)
pk_alg = ssl_get_ciphersuite_sig_pk_alg( ciphersuite_info );
if( pk_alg != POLARSSL_PK_NONE &&
( ssl->pk_key == NULL ||
! pk_can_do( ssl->pk_key, pk_alg ) ) )
continue;
+#endif
goto have_ciphersuite;
}