--- a/src/_cffi_src/openssl/x509_vfy.py.orig 2017-04-11 19:49:14.765073278 +0200 +++ b/src/_cffi_src/openssl/x509_vfy.py 2017-04-11 19:48:51.541130712 +0200 @@ -221,10 +221,12 @@ static const long X509_V_ERR_SUITE_B_INV static const long X509_V_ERR_SUITE_B_INVALID_SIGNATURE_ALGORITHM = 0; static const long X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED = 0; static const long X509_V_ERR_SUITE_B_CANNOT_SIGN_P_384_WITH_P_256 = 0; +#if LIBRESSL_VERSION_NUMBER < 0x2050300fL static const long X509_V_ERR_HOSTNAME_MISMATCH = 0; static const long X509_V_ERR_EMAIL_MISMATCH = 0; static const long X509_V_ERR_IP_ADDRESS_MISMATCH = 0; #endif +#endif /* OpenSSL 1.0.2beta2+ verification parameters */ #if CRYPTOGRAPHY_OPENSSL_102BETA2_OR_GREATER && \