crypto: BoringSSL can work with NODE_EXTRA_CA_CERTS

Author: codebytere

src/node.cc

@@ -1083,7 +1083,8 @@ InitializeOncePerProcessInternal(const std::vector<std::string>& args,
  }
 
  if (!(flags & ProcessInitializationFlags::kNoInitOpenSSL)) {
-#if HAVE_OPENSSL && !defined(OPENSSL_IS_BORINGSSL)
+#if HAVE_OPENSSL
+#if !defined(OPENSSL_IS_BORINGSSL)
  auto GetOpenSSLErrorString = []() -> std::string {
  std::string ret;
  ERR_print_errors_cb(
@@ -1174,7 +1175,7 @@ InitializeOncePerProcessInternal(const std::vector<std::string>& args,
 
  // Ensure CSPRNG is properly seeded.
  CHECK(crypto::CSPRNG(nullptr, 0).is_ok());
-
+#endif // defined(OPENSSL_IS_BORINGSSL)
  V8::SetEntropySource([](unsigned char* buffer, size_t length) {
  // V8 falls back to very weak entropy when this function fails
  // and /dev/urandom isn't available. That wouldn't be so bad if
@@ -1189,7 +1190,7 @@ InitializeOncePerProcessInternal(const std::vector<std::string>& args,
  if (credentials::SafeGetenv("NODE_EXTRA_CA_CERTS", &extra_ca_certs))
  crypto::UseExtraCaCerts(extra_ca_certs);
  }
-#endif // HAVE_OPENSSL && !defined(OPENSSL_IS_BORINGSSL)
+#endif // HAVE_OPENSSL
  }
 
  if (!(flags & ProcessInitializationFlags::kNoInitializeNodeV8Platform)) {