From 949ec14209c57e422b5bca092d0cebc8decc21a1 Mon Sep 17 00:00:00 2001
From: Christian Heimes <christian@cheimes.de>
Date: Thu, 21 Nov 2013 16:26:51 +0100
Subject: Issue #19682: Fix compatibility issue with old version of OpenSSL
 that was introduced by Issue #18379.

---
 Misc/NEWS      | 3 +++
 Modules/_ssl.c | 6 ++++++
 2 files changed, 9 insertions(+)

diff --git a/Misc/NEWS b/Misc/NEWS
index 0198630..d47cefd 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -59,6 +59,9 @@ Core and Builtins
 Library
 -------
 
+- Issue #19682: Fix compatibility issue with old version of OpenSSL that
+  was introduced by Issue #18379.
+
 - Issue #19633: Fixed writing not compressed 16- and 32-bit wave files on
   big-endian platforms.
 
diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index 8f3cc71..3a72530 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -1024,9 +1024,15 @@ _get_crl_dp(X509 *certificate) {
     int i, j, result;
     PyObject *lst;
 
+#if OPENSSL_VERSION_NUMBER < 0x10001000L
+    dps = X509_get_ext_d2i(certificate, NID_crl_distribution_points,
+                           NULL, NULL);
+#else
     /* Calls x509v3_cache_extensions and sets up crldp */
     X509_check_ca(certificate);
     dps = certificate->crldp;
+#endif
+
     if (dps == NULL) {
         return Py_None;
     }
-- 
cgit v0.12