Require wolfssl to be built with --enable-wolfssh

Author: padelsbach

configure.ac

@@ -244,7 +244,22 @@ AS_IF([test "x$ENABLED_SHELL" = "xyes"],
 AS_IF([test "x$ENABLED_AGENT" = "xyes"],
       [AM_CPPFLAGS="$AM_CPPFLAGS -DWOLFSSH_AGENT"])
 AS_IF([test "x$ENABLED_CERTS" = "xyes"],
-      [AM_CPPFLAGS="$AM_CPPFLAGS -DWOLFSSH_CERTS"])
+      [AM_CPPFLAGS="$AM_CPPFLAGS -DWOLFSSH_CERTS"
+       # FPKI profile checks in certman.c reference wolfSSL symbols
+       # (e.g. EXTKEYUSE_SSH_MSCL, DecodedCert::extExtKeyUsageSsh) that
+       # are only exposed when wolfSSL itself was built with
+       # WOLFSSL_WOLFSSH. Fail early if it isn't.
+       AC_MSG_CHECKING([wolfSSL for WOLFSSL_WOLFSSH support])
+       AC_COMPILE_IFELSE(
+         [AC_LANG_PROGRAM(
+           [[#include <wolfssl/options.h>
+             #ifndef WOLFSSL_WOLFSSH
+             #error WOLFSSL_WOLFSSH not defined
+             #endif]],
+           [[]])],
+         [AC_MSG_RESULT([yes])],
+         [AC_MSG_RESULT([no])
+          AC_MSG_ERROR([wolfSSL must be built with --enable-wolfssh (WOLFSSL_WOLFSSH) to use wolfSSH --enable-certs.])])])
 AS_IF([test "x$ENABLED_SMALLSTACK" = "xyes"],
       [AM_CPPFLAGS="$AM_CPPFLAGS -DWOLFSSH_SMALL_STACK"])
 AS_IF([test "x$ENABLED_SSHCLIENT" = "xyes"],