From 9f7e82a081e35c1e55a5800cc3a8b2fee3d2f90d Mon Sep 17 00:00:00 2001
From: Eric Blankenhorn <eric@wolfssl.com>
Date: Fri, 20 Jan 2023 08:39:44 -0600
Subject: [PATCH] Add WOLFSSL_DH_CONST option to Cmake

---
 CMakeLists.txt | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index 901267e6c..7adbe5bcc 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -931,7 +931,7 @@ endif()
 # DH
 add_option("WOLFSSL_DH"
     "Enable DH (default: enabled)"
-    "yes" "yes;no")
+    "yes" "yes;no;const")
 
 if(WOLFSSL_OPENSSH)
     override_cache(WOLFSSL_DH "yes")
@@ -946,6 +946,11 @@ else()
     endif()
 endif()
 
+if("${WOLFSSL_DH}" STREQUAL "const")
+    list(APPEND WOLFSSL_DEFINITIONS "-DWOLFSSL_DH_CONST")
+    set(WOLFSSL_DH_CONST "yes")
+endif()
+
 # TODO: - Anonymous
 
 # ASN
@@ -1949,7 +1954,7 @@ elseif(APPLE)
             ${SECURITY_FRAMEWORK})
     endif()
 else()
-    if(WOLFSSL_DH)
+    if(WOLFSSL_DH AND NOT WOLFSSL_DH_CONST)
         # DH requires math (m) library
         target_link_libraries(wolfssl
             PUBLIC