diff -urN ../exim-4.97.orig/src/tls-openssl.c ./src/tls-openssl.c
--- ../exim-4.97.orig/src/tls-openssl.c	2023-11-04 14:55:49.000000000 +0200
+++ ./src/tls-openssl.c	2023-11-08 22:43:40.811079000 +0200
@@ -2605,7 +2605,7 @@
     asking for certificate-status under DANE, so this callback won't run for
     that combination. It still will for non-DANE. */
 
-#ifdef EXIM_HAVE_OPENSSL_OCSP_RESP_GET0_SIGNER
+#if defined(EXIM_HAVE_OPENSSL_OCSP_RESP_GET0_SIGNER) && defined(SUPPORT_DANE)
     X509 * signer;
 
     if (  tls_out.dane_verified