const correct X509_VERIFY_PARAM_get_hostflags()

This is currently an internal helper only used by a regress test.
We'll have to expose in the public API for Python 3.14:

https://github.com/libressl/portable/issues/1202

2 files changed, 4 insertions, 4 deletions

diff --git a/src/lib/libcrypto/x509/x509_vpm.c b/src/lib/libcrypto/x509/x509_vpm.c
index 19091b12aa..0789a51c13 100644
--- a/src/lib/libcrypto/x509/x509_vpm.c
+++ b/src/lib/libcrypto/x509/x509_vpm.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_vpm.c,v 1.56 2025/05/10 05:54:39 tb Exp $ */
+/* $OpenBSD: x509_vpm.c,v 1.57 2025/10/10 23:07:40 tb Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 2004.
  */
@@ -545,7 +545,7 @@ LCRYPTO_ALIAS(X509_VERIFY_PARAM_add1_host);
 
 /* Public API in OpenSSL - nothing seems to use this. */
 unsigned int
-X509_VERIFY_PARAM_get_hostflags(X509_VERIFY_PARAM *param)
+X509_VERIFY_PARAM_get_hostflags(const X509_VERIFY_PARAM *param)
 {
         return param->hostflags;
 }
diff --git a/src/regress/lib/libssl/unit/ssl_verify_param.c b/src/regress/lib/libssl/unit/ssl_verify_param.c
index cdb52c56a8..c5ad5c3a2b 100644
--- a/src/regress/lib/libssl/unit/ssl_verify_param.c
+++ b/src/regress/lib/libssl/unit/ssl_verify_param.c
@@ -1,4 +1,4 @@
-/*      $OpenBSD: ssl_verify_param.c,v 1.1 2023/05/24 08:54:59 tb Exp $ */
+/*      $OpenBSD: ssl_verify_param.c,v 1.2 2025/10/10 23:07:40 tb Exp $ */
 
 /*
  * Copyright (c) 2023 Theo Buehler <tb@openbsd.org>
@@ -22,7 +22,7 @@
 #include <openssl/ssl.h>
 #include <openssl/x509v3.h>
 
-unsigned int X509_VERIFY_PARAM_get_hostflags(X509_VERIFY_PARAM *param);
+unsigned int X509_VERIFY_PARAM_get_hostflags(const X509_VERIFY_PARAM *param);
 
 static int
 ssl_verify_param_flags_inherited(void)