crypto: BoringSSL can work with NODE_EXTRA_CA_CERTS

Author: codebytere

src/node.cc

@@ -1083,7 +1083,8 @@ InitializeOncePerProcessInternal(const std::vector<std::string>& args,
   }
 
   if (!(flags & ProcessInitializationFlags::kNoInitOpenSSL)) {
-#if HAVE_OPENSSL && !defined(OPENSSL_IS_BORINGSSL)
+#if HAVE_OPENSSL
+#if !defined(OPENSSL_IS_BORINGSSL)
     auto GetOpenSSLErrorString = []() -> std::string {
       std::string ret;
       ERR_print_errors_cb(
@@ -1174,7 +1175,7 @@ InitializeOncePerProcessInternal(const std::vector<std::string>& args,
 
     // Ensure CSPRNG is properly seeded.
     CHECK(crypto::CSPRNG(nullptr, 0).is_ok());
-
+#endif // defined(OPENSSL_IS_BORINGSSL)
     V8::SetEntropySource([](unsigned char* buffer, size_t length) {
       // V8 falls back to very weak entropy when this function fails
       // and /dev/urandom isn't available. That wouldn't be so bad if
@@ -1189,7 +1190,7 @@ InitializeOncePerProcessInternal(const std::vector<std::string>& args,
       if (credentials::SafeGetenv("NODE_EXTRA_CA_CERTS", &extra_ca_certs))
         crypto::UseExtraCaCerts(extra_ca_certs);
     }
-#endif  // HAVE_OPENSSL && !defined(OPENSSL_IS_BORINGSSL)
+#endif  // HAVE_OPENSSL
   }
 
   if (!(flags & ProcessInitializationFlags::kNoInitializeNodeV8Platform)) {