From 5b39976cc0541965526c018dfd96ddfd76989bda Mon Sep 17 00:00:00 2001
From: John Safranek <john@wolfssl.com>
Date: Wed, 26 Aug 2020 16:47:44 -0700
Subject: [PATCH] Sniffer without OldTls 1. Put a guard around the call to
 DeriveKeys() when building with   --enable-sniffer --disable-oldtls.
 Disabling OldTls removes the   DeriveKeys() function. Similar logic used in
 internal.c.

---
 src/sniffer.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/sniffer.c b/src/sniffer.c
index 37353df26..5658de58c 100644
--- a/src/sniffer.c
+++ b/src/sniffer.c
@@ -2856,8 +2856,10 @@ static int ProcessServerHello(int msgSz, const byte* input, int* sslBytes,
                 ret += DeriveTlsKeys(session->sslClient);
             }
             else {
+    #ifndef NO_OLD_TLS
                 ret =  DeriveKeys(session->sslServer);
                 ret += DeriveKeys(session->sslClient);
+    #endif
             }
             ret += SetKeysSide(session->sslServer, ENCRYPT_AND_DECRYPT_SIDE);
             ret += SetKeysSide(session->sslClient, ENCRYPT_AND_DECRYPT_SIDE);