--- a/modules/ssl/ssl_engine_init.c 2019-02-19 10:56:01.828776469 +0100 +++ b/modules/ssl/ssl_engine_init.c 2019-02-19 10:56:35.417774131 +0100 @@ -1494,7 +1494,7 @@ X509_STORE_CTX *sctx; X509_STORE *store = SSL_CTX_get_cert_store(mctx->ssl_ctx); -#if OPENSSL_VERSION_NUMBER >= 0x1010100fL +#if OPENSSL_VERSION_NUMBER >= 0x1010100fL && 0 /* For OpenSSL >=1.1.1, turn on client cert support which is * otherwise turned off by default (by design). * https://github.com/openssl/openssl/issues/6933 */