From 0e47020f7f20c9ecf5d796497064f1ff124fbfa6 Mon Sep 17 00:00:00 2001
From: "Simon J. Gerraty" <sjg@FreeBSD.org>
Date: Fri, 20 Dec 2019 21:56:28 +0000
Subject: [PATCH] Avoid unused vars when VE_ECDSA_HASH_AGAIN undefined

Reviewed by:	emaste
MFC after:	1 week
---
 lib/libsecureboot/vets.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/lib/libsecureboot/vets.c b/lib/libsecureboot/vets.c
index c1686f300eb7..7d974fc54115 100644
--- a/lib/libsecureboot/vets.c
+++ b/lib/libsecureboot/vets.c
@@ -642,9 +642,10 @@ hexdigest(char *buf, size_t bufsz, unsigned char *foo, size_t foo_len)
 static unsigned char *
 verify_ec(br_x509_pkey *pk, const char *file, const char *sigfile)
 {
-	char hexbuf[br_sha512_SIZE * 2 + 2];
+#ifdef VE_ECDSA_HASH_AGAIN
+	char *hex, hexbuf[br_sha512_SIZE * 2 + 2];
+#endif
 	unsigned char rhbuf[br_sha512_SIZE];
-	char *hex;
 	br_sha256_context ctx;
 	unsigned char *fcp, *scp;
 	size_t flen, slen, plen;