Provide SSL chain/cert chain APIs.

These allow for chains to be managed on a per-certificate basis rather than
as a single "extra certificates" list. Note that "chain" in this context
does not actually include the leaf certificate however, unlike
SSL_CTX_use_certificate_chain_{file,mem}().

Thanks to sthen@ for running this through a bulk ports build.

ok beck@ tb@

1 files changed, 12 insertions, 0 deletions

diff --git a/src/lib/libssl/Symbols.list b/src/lib/libssl/Symbols.list
index 425d71126b..e72616a779 100644
--- a/src/lib/libssl/Symbols.list
+++ b/src/lib/libssl/Symbols.list
@@ -57,14 +57,18 @@ SSL_CIPHER_is_aead
 SSL_COMP_add_compression_method
 SSL_COMP_get_compression_methods
 SSL_COMP_get_name
+SSL_CTX_add0_chain_cert
+SSL_CTX_add1_chain_cert
 SSL_CTX_add_client_CA
 SSL_CTX_add_session
 SSL_CTX_callback_ctrl
 SSL_CTX_check_private_key
+SSL_CTX_clear_chain_certs
 SSL_CTX_ctrl
 SSL_CTX_flush_sessions
 SSL_CTX_free
 SSL_CTX_get0_certificate
+SSL_CTX_get0_chain_certs
 SSL_CTX_get0_param
 SSL_CTX_get_cert_store
 SSL_CTX_get_ciphers
@@ -93,6 +97,8 @@ SSL_CTX_sess_set_get_cb
 SSL_CTX_sess_set_new_cb
 SSL_CTX_sess_set_remove_cb
 SSL_CTX_sessions
+SSL_CTX_set0_chain
+SSL_CTX_set1_chain
 SSL_CTX_set1_groups
 SSL_CTX_set1_groups_list
 SSL_CTX_set1_param
@@ -164,6 +170,8 @@ SSL_SESSION_set_time
 SSL_SESSION_set_timeout
 SSL_SESSION_up_ref
 SSL_accept
+SSL_add0_chain_cert
+SSL_add1_chain_cert
 SSL_add_client_CA
 SSL_add_dir_cert_subjects_to_stack
 SSL_add_file_cert_subjects_to_stack
@@ -175,6 +183,7 @@ SSL_cache_hit
 SSL_callback_ctrl
 SSL_check_private_key
 SSL_clear
+SSL_clear_chain_certs
 SSL_connect
 SSL_copy_session_id
 SSL_ctrl
@@ -184,6 +193,7 @@ SSL_dup_CA_list
 SSL_export_keying_material
 SSL_free
 SSL_get0_alpn_selected
+SSL_get0_chain_certs
 SSL_get0_next_proto_negotiated
 SSL_get0_param
 SSL_get1_session
@@ -247,6 +257,8 @@ SSL_renegotiate_pending
 SSL_rstate_string
 SSL_rstate_string_long
 SSL_select_next_proto
+SSL_set0_chain
+SSL_set1_chain
 SSL_set1_groups
 SSL_set1_groups_list
 SSL_set1_host