Remove unused public X509_TRUST API

Another thing that should never have leaked out of the library. It
will become internal entirely, where the code can be simplified greatly.

ok jsing

2 files changed, 2 insertions, 92 deletions

diff --git a/src/lib/libcrypto/x509/x509.h b/src/lib/libcrypto/x509/x509.h
index c84ff6b6b3..70d931c578 100644
--- a/src/lib/libcrypto/x509/x509.h
+++ b/src/lib/libcrypto/x509/x509.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509.h,v 1.106 2024/03/02 10:33:51 tb Exp $ */
+/* $OpenBSD: x509.h,v 1.107 2024/03/02 10:48:17 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -662,8 +662,6 @@ int X509_alias_set1(X509 *x, const unsigned char *name, int len);
 int X509_keyid_set1(X509 *x, const unsigned char *id, int len);
 unsigned char *X509_alias_get0(X509 *x, int *len);
 unsigned char *X509_keyid_get0(X509 *x, int *len);
-int (*X509_TRUST_set_default(int (*trust)(int , X509 *, int)))(int, X509 *, int);
-int X509_TRUST_set(int *t, int trust);
 int X509_add1_trust_object(X509 *x, const ASN1_OBJECT *obj);
 int X509_add1_reject_object(X509 *x, const ASN1_OBJECT *obj);
 void X509_trust_clear(X509 *x);
@@ -1041,15 +1039,6 @@ int X509_PUBKEY_get0_param(ASN1_OBJECT **ppkalg, const unsigned char **pk,
     int *ppklen, X509_ALGOR **pa, X509_PUBKEY *pub);
 
 int X509_check_trust(X509 *x, int id, int flags);
-int X509_TRUST_get_count(void);
-X509_TRUST * X509_TRUST_get0(int idx);
-int X509_TRUST_get_by_id(int id);
-int X509_TRUST_add(int id, int flags, int (*ck)(X509_TRUST *, X509 *, int),
-    const char *name, int arg1, void *arg2);
-void X509_TRUST_cleanup(void);
-int X509_TRUST_get_flags(const X509_TRUST *xp);
-char *X509_TRUST_get0_name(const X509_TRUST *xp);
-int X509_TRUST_get_trust(const X509_TRUST *xp);
 
 int X509_up_ref(X509 *x);
 STACK_OF(X509) *X509_chain_up_ref(STACK_OF(X509) *chain);
diff --git a/src/lib/libcrypto/x509/x509_trs.c b/src/lib/libcrypto/x509/x509_trs.c
index a6fc4d61c5..774ce584b8 100644
--- a/src/lib/libcrypto/x509/x509_trs.c
+++ b/src/lib/libcrypto/x509/x509_trs.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_trs.c,v 1.40 2024/01/13 19:57:38 tb Exp $ */
+/* $OpenBSD: x509_trs.c,v 1.41 2024/03/02 10:48:17 tb Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 1999.
  */
@@ -219,82 +219,3 @@ X509_check_trust(X509 *x, int trust_id, int flags)
         return trust->check_trust((X509_TRUST *)trust, x, flags);
 }
 LCRYPTO_ALIAS(X509_check_trust);
-
-/*
- * Remove all the functions below in the next bump.
- */
-
-int
-(*X509_TRUST_set_default(int (*trust)(int , X509 *, int)))(int, X509 *, int)
-{
-        X509error(ERR_R_DISABLED);
-        return NULL;
-}
-LCRYPTO_ALIAS(X509_TRUST_set_default);
-
-int
-X509_TRUST_get_count(void)
-{
-        return X509_TRUST_COUNT;
-}
-LCRYPTO_ALIAS(X509_TRUST_get_count);
-
-X509_TRUST *
-X509_TRUST_get0(int idx)
-{
-        X509error(ERR_R_DISABLED);
-        return NULL;
-}
-LCRYPTO_ALIAS(X509_TRUST_get0);
-
-int
-X509_TRUST_get_by_id(int id)
-{
-        X509error(ERR_R_DISABLED);
-        return -1;
-}
-LCRYPTO_ALIAS(X509_TRUST_get_by_id);
-
-int
-X509_TRUST_set(int *t, int trust)
-{
-        X509error(ERR_R_DISABLED);
-        return 0;
-}
-LCRYPTO_ALIAS(X509_TRUST_set);
-
-int
-X509_TRUST_add(int id, int flags, int (*ck)(X509_TRUST *, X509 *, int),
-    const char *name, int arg1, void *arg2)
-{
-        X509error(ERR_R_DISABLED);
-        return 0;
-}
-LCRYPTO_ALIAS(X509_TRUST_add);
-
-void
-X509_TRUST_cleanup(void)
-{
-}
-LCRYPTO_ALIAS(X509_TRUST_cleanup);
-
-int
-X509_TRUST_get_flags(const X509_TRUST *xp)
-{
-        return xp->flags;
-}
-LCRYPTO_ALIAS(X509_TRUST_get_flags);
-
-char *
-X509_TRUST_get0_name(const X509_TRUST *xp)
-{
-        return xp->name;
-}
-LCRYPTO_ALIAS(X509_TRUST_get0_name);
-
-int
-X509_TRUST_get_trust(const X509_TRUST *xp)
-{
-        return xp->trust;
-}
-LCRYPTO_ALIAS(X509_TRUST_get_trust);