Remove unused parts of the purpose API

Most of this is the ability to add custom purposes. Also the astounding
X509_STORE_CTX_purpose_inherit(). The names are used by PHP, and M2Crypto
exposes X509_check_purpose(), so these remain public. Some weird, most
likely invalid, uses also remain in rust-openssl.

ok jsing

2 files changed, 2 insertions, 8 deletions

diff --git a/src/lib/libcrypto/hidden/openssl/x509_vfy.h b/src/lib/libcrypto/hidden/openssl/x509_vfy.h
index 3502492133..88d8b143df 100644
--- a/src/lib/libcrypto/hidden/openssl/x509_vfy.h
+++ b/src/lib/libcrypto/hidden/openssl/x509_vfy.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_vfy.h,v 1.7 2024/02/23 10:39:07 tb Exp $ */
+/* $OpenBSD: x509_vfy.h,v 1.8 2024/03/02 10:40:05 tb Exp $ */
 /*
  * Copyright (c) 2022 Bob Beck <beck@openbsd.org>
  *
@@ -109,7 +109,6 @@ LCRYPTO_USED(X509_STORE_CTX_set_chain);
 LCRYPTO_USED(X509_STORE_CTX_set0_crls);
 LCRYPTO_USED(X509_STORE_CTX_set_purpose);
 LCRYPTO_USED(X509_STORE_CTX_set_trust);
-LCRYPTO_USED(X509_STORE_CTX_purpose_inherit);
 LCRYPTO_USED(X509_STORE_CTX_set_flags);
 LCRYPTO_USED(X509_STORE_CTX_set_time);
 LCRYPTO_USED(X509_STORE_CTX_set0_verified_chain);
diff --git a/src/lib/libcrypto/hidden/openssl/x509v3.h b/src/lib/libcrypto/hidden/openssl/x509v3.h
index 67f6a85bc4..a833ec9f4e 100644
--- a/src/lib/libcrypto/hidden/openssl/x509v3.h
+++ b/src/lib/libcrypto/hidden/openssl/x509v3.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509v3.h,v 1.6 2024/03/02 10:35:32 tb Exp $ */
+/* $OpenBSD: x509v3.h,v 1.7 2024/03/02 10:40:05 tb Exp $ */
 /*
  * Copyright (c) 2022 Bob Beck <beck@openbsd.org>
  *
@@ -177,18 +177,13 @@ LCRYPTO_USED(X509V3_extensions_print);
 LCRYPTO_USED(X509_check_ca);
 LCRYPTO_USED(X509_check_purpose);
 LCRYPTO_USED(X509_supported_extension);
-LCRYPTO_USED(X509_PURPOSE_set);
 LCRYPTO_USED(X509_check_issued);
 LCRYPTO_USED(X509_check_akid);
 LCRYPTO_USED(X509_PURPOSE_get_count);
 LCRYPTO_USED(X509_PURPOSE_get0);
 LCRYPTO_USED(X509_PURPOSE_get_by_sname);
-LCRYPTO_USED(X509_PURPOSE_get_by_id);
-LCRYPTO_USED(X509_PURPOSE_add);
 LCRYPTO_USED(X509_PURPOSE_get0_name);
 LCRYPTO_USED(X509_PURPOSE_get0_sname);
-LCRYPTO_USED(X509_PURPOSE_get_trust);
-LCRYPTO_USED(X509_PURPOSE_cleanup);
 LCRYPTO_USED(X509_PURPOSE_get_id);
 LCRYPTO_USED(X509_get_extension_flags);
 LCRYPTO_USED(X509_get_key_usage);