Explicitly export a list of symbols from libcrypto.

Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting
the bn_* symbols. These are documented as only being intended for internal
use, so why they were placed in a public header is beyond me...

This hides 363 previously exported symbols, most of which exist in headers
that are not installed and were never intended to be public. This also
removes a few crusty old things that should have died long ago (like
_ossl_old_des_read_pw). But don't worry... there are still 3451 symbols
exported from the library.

With input and testing from inoguchi@.

ok beck@ inoguchi@

2 files changed, 10 insertions, 2 deletions

diff --git a/src/lib/libcrypto/gost/gost_asn1.h b/src/lib/libcrypto/gost/gost_asn1.h
index 8cafa6be3b..7cabfc79c9 100644
--- a/src/lib/libcrypto/gost/gost_asn1.h
+++ b/src/lib/libcrypto/gost/gost_asn1.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: gost_asn1.h,v 1.2 2016/09/04 17:02:31 jsing Exp $ */
+/* $OpenBSD: gost_asn1.h,v 1.3 2016/12/21 15:49:29 jsing Exp $ */
 /*
  * Copyright (c) 2014 Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
  * Copyright (c) 2005-2006 Cryptocom LTD
@@ -54,6 +54,8 @@
 
 #include <openssl/asn1.h>
 
+__BEGIN_HIDDEN_DECLS
+
 typedef struct {
         ASN1_OCTET_STRING *encrypted_key;
         ASN1_OCTET_STRING *imit;
@@ -100,4 +102,6 @@ GOST_KEY_PARAMS *d2i_GOST_KEY_PARAMS(GOST_KEY_PARAMS **a, const unsigned char **
 int i2d_GOST_KEY_PARAMS(GOST_KEY_PARAMS *a, unsigned char **out);
 extern const ASN1_ITEM GOST_KEY_PARAMS_it;
 
+__END_HIDDEN_DECLS
+
 #endif
diff --git a/src/lib/libcrypto/gost/gost_locl.h b/src/lib/libcrypto/gost/gost_locl.h
index 9036f59771..b2e2c1362a 100644
--- a/src/lib/libcrypto/gost/gost_locl.h
+++ b/src/lib/libcrypto/gost/gost_locl.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: gost_locl.h,v 1.3 2014/11/13 20:29:55 miod Exp $ */
+/* $OpenBSD: gost_locl.h,v 1.4 2016/12/21 15:49:29 jsing Exp $ */
 /*
  * Copyright (c) 2014 Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
  * Copyright (c) 2005-2006 Cryptocom LTD
@@ -55,6 +55,8 @@
 #include <openssl/ec.h>
 #include <openssl/ecdsa.h>
 
+__BEGIN_HIDDEN_DECLS
+
 /* Internal representation of GOST substitution blocks */
 typedef struct {
         unsigned char k8[16];
@@ -110,4 +112,6 @@ extern int GostR3410_get_pk_digest(int nid);
 extern int GostR3410_256_param_id(const char *value);
 extern int GostR3410_512_param_id(const char *value);
 
+__END_HIDDEN_DECLS
+
 #endif