Merge branch 'tls-kdh' of https://github.com/arpa2/tlspool into tls-kdh

[tlspool] / src / starttls.c

diff --git a/src/starttls.c b/src/starttls.c
index e7fc350..2383dbb 100644 (file)
--- a/src/starttls.c
+++ b/src/starttls.c
@@ -3165,9 +3165,9 @@ static void valexp_Oo_start (void *vcmd, struct valexp *ve, char pred) {
                        valflag = o2vf (online_globaldir_x509 (
                                        rid,
                                        raw->data, raw->size));
-#ifdef GNUTLS_CRT_KRB
+#ifdef HAVE_TLS_KDH
                } else if (cmd->remote_cert_type == GNUTLS_CRT_KRB) {
-                       // Kerberos is sufficiently "live" to always pass O
+                       // Kerberos is sufficiently "live" to be pass O
                        valflag = 1;
                        goto setvalflag;
 #endif