openbsd/src/lib/libcrypto/hidden/openssl/x509.h, branch OPENBSD_7_9_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE2025-07-16T15:59:26+00:00Ride the libcrypto bump with some simple cleanup:2025-07-16T15:59:26+00:00tb2025-07-16T15:59:26+00:00urn:sha1:c82a6c2e80c4901e67b15003b73d79f25ed56a6c
Remove BIO_s_log(): already unhooked in portable, completely unused.
Remove X509_PKEY_new/free from public API. Remove PEM_X509_INFO_read()
PEM_X509_INFO_write_bio(): all unused garbage.
The simplify X509_PKEY_new/free was ok kenjiro.
Unexport X509_NAME_print()2025-03-09T15:17:22+00:00tb2025-03-09T15:17:22+00:00urn:sha1:dc9ea81af9ab231982376f6521683f8df998da3d
Nothing uses this anymore. M2Crypto has been patched and a fix for
opensc has been upstreamed.
ok jsing
This is the start of a major bump. Don't build the tree until I have
synced sets in about 20 commits.
Make X509at_* API internal2024-08-31T10:46:40+00:00tb2024-08-31T10:46:40+00:00urn:sha1:6e18dec83a409158e5e06e9980d445c2a14a5fbe
The only consumer, yara, has been adjusted. It will be some more work
to remove this idiocy internally, but at least we will no longer have
to care about external consumers.
ok beck jsing
Remove EVP_PKEY.*attr* API2024-08-31T10:25:38+00:00tb2024-08-31T10:25:38+00:00urn:sha1:1879b1c335b79500e4608d064e6a67c172898224
I ranted enough about this recently. PKCS#12. Microsoft. 'nuff said.
ok beck jsing
Remove X509_REQ_{set,get}_extension_nids()2024-08-31T10:16:52+00:00tb2024-08-31T10:16:52+00:00urn:sha1:6b73d9352a214f801122b7ee10c167492ca9e38e
LibreSSL no longer supports non-standard OIDs for use in the extensions
attribute of CSRs. The API that enabled that (and nobody used of course)
can now go.
ok beck jsing
Remove X509_check_trust() and some related defines2024-08-31T10:12:23+00:00tb2024-08-31T10:12:23+00:00urn:sha1:98cde9e87c7eeb1ad50a82b9052b86dd675bd285
Someone thought it would be a good idea to append non-standard trust
information to the certs in the trust store. This API is used to
inspect that depending on the intended purpose of the cert. Only
M2Crypto thought it necessary to expose this. It was adjusted.
ok beck jsing
Add LCRYPTO_USED(X509_get_signature_info)2024-08-28T08:41:18+00:00tb2024-08-28T08:41:18+00:00urn:sha1:8add2ab96ee5ef666a29e3f8cb00c8b5a19ea3bfMark X509at_get_attr{,_count}() and X509at_delete_attr() as unused2024-07-26T13:34:56+00:00tb2024-07-26T13:34:56+00:00urn:sha1:1648bb29bba5aea5edc5c5d7eeb6b49f60265aea
ok jsing
Switch the EVP_PKEY_*attr* API to LCRYPTO_UNUSED()2024-07-15T18:50:42+00:00tb2024-07-15T18:50:42+00:00urn:sha1:6ab1df0cfb5d14a130fb2f67217869dd3a89f22a
This would have prevented the PKCS12 oopsie.
Guard variable declarations to unbreak non-namespaced builds.2024-07-08T17:01:54+00:00beck2024-07-08T17:01:54+00:00urn:sha1:037c9f9a49a2c54475ac64e1d773c8a1b36392d1
ok tb@