From 2975a1d6f13d9cb20fc9ecf47ad28f09b9d30487 Mon Sep 17 00:00:00 2001
From: Howard Chu <hyc@openldap.org>
Date: Wed, 19 Apr 2017 20:19:09 +0100
Subject: [PATCH] Tweaks for OpenSSL 1.1 API deprecations

---
 servers/slapd/overlays/autoca.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/servers/slapd/overlays/autoca.c b/servers/slapd/overlays/autoca.c
index c7120bfeaf..5a8ec1b481 100644
--- a/servers/slapd/overlays/autoca.c
+++ b/servers/slapd/overlays/autoca.c
@@ -32,8 +32,10 @@
 #include "slap.h"
 #include "config.h"
 
+#include <openssl/x509.h>
 #include <openssl/x509v3.h>
 #include <openssl/evp.h>
+#include <openssl/bn.h>
 
 /* Starting with OpenSSL 1.1.0, rsa.h is no longer included in
  * x509.h, so we need to explicitly include it for the
@@ -42,6 +44,8 @@
 
 #if OPENSSL_VERSION_NUMBER >= 0x10100000
 #include <openssl/rsa.h>
+#define X509_get_notBefore(x)	X509_getm_notBefore(x)
+#define X509_get_notAfter(x)	X509_getm_notAfter(x)
 #endif
 
 /* This overlay implements a certificate authority that can generate