From be8e51c459e95bd4ffdb9b957f58607cccf7f515 Mon Sep 17 00:00:00 2001
From: Georg Richter <georg@mariadb.com>
Date: Mon, 31 May 2021 08:29:37 +0200
Subject: [PATCH] MDEV-25511: Command line tools don't support CRL parameters

Enable CRL support for GnuTLS (which was implemented by CONC-433).
---
 include/sslopt-case.h | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/include/sslopt-case.h b/include/sslopt-case.h
index 72881a266ab..11351247cd7 100644
--- a/include/sslopt-case.h
+++ b/include/sslopt-case.h
@@ -29,10 +29,15 @@
       One can disable SSL later by using --skip-ssl or --ssl=0
     */
       opt_use_ssl= 1;
-#if defined (HAVE_WOLFSSL) && (!defined (_WIN32) || defined (MYSQL_SERVER))
-      /* CRL does not work with WolfSSL */
+#if defined (HAVE_WOLFSSL)
+#if defined(MYSQL_SERVER)
+      /* CRL does not work with WolfSSL (server) */
       opt_ssl_crl= NULL;
+#endif
+#if !defined(_WIN32) || !defined(LIBMARIADB)
+      /* CRL_PATH does not work with WolfSSL (server) and GnuTLS (client) */
       opt_ssl_crlpath= NULL;
+#endif
 #endif
       break;
 #endif