Remove X509V3_EXT extensibility API

You used to be able to define your own X.509 extension handlers. Great.
Even greater: the verifier would ignore any custom extensions. So this
was only ever useful for serialization and deserialization. In other
words, almost entirely pointless. The API was also unused except for
a hack in kore-acme, which was fixed recently.

ok jsing

1 files changed, 1 insertions, 5 deletions

diff --git a/src/lib/libcrypto/hidden/openssl/x509v3.h b/src/lib/libcrypto/hidden/openssl/x509v3.h
index a85c5c26aa..67f6a85bc4 100644
--- a/src/lib/libcrypto/hidden/openssl/x509v3.h
+++ b/src/lib/libcrypto/hidden/openssl/x509v3.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509v3.h,v 1.5 2023/07/05 21:14:54 bcook Exp $ */
+/* $OpenBSD: x509v3.h,v 1.6 2024/03/02 10:35:32 tb Exp $ */
 /*
  * Copyright (c) 2022 Bob Beck <beck@openbsd.org>
  *
@@ -160,10 +160,6 @@ LCRYPTO_USED(i2s_ASN1_INTEGER);
 LCRYPTO_USED(s2i_ASN1_INTEGER);
 LCRYPTO_USED(i2s_ASN1_ENUMERATED);
 LCRYPTO_USED(i2s_ASN1_ENUMERATED_TABLE);
-LCRYPTO_USED(X509V3_EXT_add);
-LCRYPTO_USED(X509V3_EXT_add_list);
-LCRYPTO_USED(X509V3_EXT_add_alias);
-LCRYPTO_USED(X509V3_EXT_cleanup);
 LCRYPTO_USED(X509V3_EXT_get);
 LCRYPTO_USED(X509V3_EXT_get_nid);
 LCRYPTO_USED(X509V3_add_standard_extensions);