diff --git a/.github/workflows/os-check.yml b/.github/workflows/os-check.yml
index 724fa8191d..30d99ae042 100644
--- a/.github/workflows/os-check.yml
+++ b/.github/workflows/os-check.yml
@@ -55,6 +55,8 @@ jobs:
             CPPFLAGS=''-DWC_RNG_SEED_CB -DWOLFSSL_NO_GETPID'' ',
           # PKCS#7 with RSA-PSS (CMS RSASSA-PSS signers)
           '--enable-pkcs7 CPPFLAGS=-DWC_RSA_PSS',
+          # PKCS#7 without RSA-PSS
+          '--enable-pkcs7',
           '--enable-opensslextra CPPFLAGS=''-DWOLFSSL_NO_CA_NAMES'' ',
           '--enable-opensslextra=x509small',
           'CPPFLAGS=''-DWOLFSSL_EXTRA'' ',
diff --git a/wolfcrypt/src/pkcs7.c b/wolfcrypt/src/pkcs7.c
index 135163dd25..e90cce9588 100644
--- a/wolfcrypt/src/pkcs7.c
+++ b/wolfcrypt/src/pkcs7.c
@@ -5445,6 +5445,9 @@ static int wc_PKCS7_ParseSignerInfo(wc_PKCS7* pkcs7, byte* in, word32 inSz,
                         ret = ASN_PARSE_E;
                     }
                     else {
+#if !defined(WC_RSA_PSS) || defined(NO_RSA)
+                        (void)paramsStart;
+#endif
 #if defined(WC_RSA_PSS) && !defined(NO_RSA)
                         if ((word32)sigOID == (word32)CTC_RSASSAPSS &&
                             paramTag == (ASN_SEQUENCE | ASN_CONSTRUCTED)) {