From c6d1d524fc5f9d75c5e0443fe9dfd4dc430e8ab1 Mon Sep 17 00:00:00 2001
From: Juliusz Sosinowicz <juliusz@wolfssl.com>
Date: Fri, 28 Aug 2020 16:05:28 +0200
Subject: [PATCH] HAVE_SESSION_TICKET can also be defined without TLS 1.2

---
 src/internal.c | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/internal.c b/src/internal.c
index dc57df024..69e6a3ef1 100644
--- a/src/internal.c
+++ b/src/internal.c
@@ -16784,9 +16784,8 @@ int CreateOcspResponse(WOLFSSL* ssl, OcspRequest** ocspRequest,
 #endif
 #endif /* !NO_WOLFSSL_SERVER */
 
-#ifndef WOLFSSL_NO_TLS12
-
-#if !defined(NO_CERTS) || defined(HAVE_SESSION_TICKET)
+#if (!defined(WOLFSSL_NO_TLS12) && !defined(NO_CERTS)) \
+    || defined(HAVE_SESSION_TICKET)
 static int cipherExtraData(WOLFSSL* ssl)
 {
     /* Cipher data that may be added by BuildMessage */
@@ -16796,6 +16795,8 @@ static int cipherExtraData(WOLFSSL* ssl)
 }
 #endif
 
+#ifndef WOLFSSL_NO_TLS12
+
 #ifndef NO_CERTS
 #if !defined(NO_WOLFSSL_SERVER) || !defined(WOLFSSL_NO_CLIENT_AUTH)
 /* handle generation of certificate (11) */