From 08e31138bdef234f4c638cebd84a2e0d33cda601 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 17 Feb 2022 10:15:22 +0100
Subject: [PATCH] appveyor: Enable kdf plugin on old images with OpenSSL
 1.0.2/1.1.0

HKDF with expand-only mode is only available since OpenSSL 1.1.1.
---
 scripts/test.sh | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/scripts/test.sh b/scripts/test.sh
index 15ca7e0e6..c397e00ec 100755
--- a/scripts/test.sh
+++ b/scripts/test.sh
@@ -200,10 +200,17 @@ win*)
 	if test "$APPVEYOR" != "True"; then
 		TARGET=
 	else
+		case "$IMG" in
+		2015|2017)
+			# old OpenSSL versions don't provide HKDF
+			CONFIG="$CONFIG --enable-kdf"
+			;;
+		esac
 		CONFIG="$CONFIG --enable-openssl"
 		CFLAGS="$CFLAGS -I$OPENSSL_DIR/include"
 		LDFLAGS="-L$OPENSSL_DIR"
 		export LDFLAGS
+
 	fi
 	CFLAGS="$CFLAGS -mno-ms-bitfields"
 	DEPS="gcc-mingw-w64-base"