diff options
author | beck <> | 2024-02-03 15:58:34 +0000 |
---|---|---|
committer | beck <> | 2024-02-03 15:58:34 +0000 |
commit | feaf10d0a7eb5e59e69c058b10c91c45d2b1b0e3 (patch) | |
tree | dc1f0834366a35df8a6de61e2722798629d7c4c2 /src/lib/libssl/ssl.h | |
parent | a931b9fe4c471545a30c6975c303fa27abc695af (diff) | |
download | openbsd-feaf10d0a7eb5e59e69c058b10c91c45d2b1b0e3.tar.gz openbsd-feaf10d0a7eb5e59e69c058b10c91c45d2b1b0e3.tar.bz2 openbsd-feaf10d0a7eb5e59e69c058b10c91c45d2b1b0e3.zip |
Remove GOST and STREEBOG support from libssl.
This version of GOST is old and not anywhere close to compliant with
modern GOST standards. It is also very intrusive in libssl and
makes a mess everywhere. Efforts to entice a suitably minded anyone
to care about it have been unsuccessful.
At this point it is probably best to remove this, and if someone
ever showed up who truly needed a working version, it should be
a clean implementation from scratch, and have it use something
closer to the typical API in libcrypto so it would integrate less
painfully here.
This removes it from libssl in preparation for it's removal from
libcrypto with a future major bump
ok tb@
Diffstat (limited to '')
-rw-r--r-- | src/lib/libssl/ssl.h | 11 |
1 files changed, 1 insertions, 10 deletions
diff --git a/src/lib/libssl/ssl.h b/src/lib/libssl/ssl.h index 8d65a1ec03..03a5a80d0a 100644 --- a/src/lib/libssl/ssl.h +++ b/src/lib/libssl/ssl.h | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ssl.h,v 1.232 2023/11/22 15:43:42 tb Exp $ */ | 1 | /* $OpenBSD: ssl.h,v 1.233 2024/02/03 15:58:33 beck Exp $ */ |
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 | * All rights reserved. | 3 | * All rights reserved. |
4 | * | 4 | * |
@@ -245,7 +245,6 @@ extern "C" { | |||
245 | #define SSL_TXT_kECDH "kECDH" | 245 | #define SSL_TXT_kECDH "kECDH" |
246 | #define SSL_TXT_kEECDH "kEECDH" | 246 | #define SSL_TXT_kEECDH "kEECDH" |
247 | #define SSL_TXT_kPSK "kPSK" | 247 | #define SSL_TXT_kPSK "kPSK" |
248 | #define SSL_TXT_kGOST "kGOST" | ||
249 | #define SSL_TXT_kSRP "kSRP" | 248 | #define SSL_TXT_kSRP "kSRP" |
250 | 249 | ||
251 | #define SSL_TXT_aRSA "aRSA" | 250 | #define SSL_TXT_aRSA "aRSA" |
@@ -255,9 +254,6 @@ extern "C" { | |||
255 | #define SSL_TXT_aKRB5 "aKRB5" | 254 | #define SSL_TXT_aKRB5 "aKRB5" |
256 | #define SSL_TXT_aECDSA "aECDSA" | 255 | #define SSL_TXT_aECDSA "aECDSA" |
257 | #define SSL_TXT_aPSK "aPSK" | 256 | #define SSL_TXT_aPSK "aPSK" |
258 | #define SSL_TXT_aGOST94 "aGOST94" | ||
259 | #define SSL_TXT_aGOST01 "aGOST01" | ||
260 | #define SSL_TXT_aGOST "aGOST" | ||
261 | 257 | ||
262 | #define SSL_TXT_DSS "DSS" | 258 | #define SSL_TXT_DSS "DSS" |
263 | #define SSL_TXT_DH "DH" | 259 | #define SSL_TXT_DH "DH" |
@@ -293,12 +289,8 @@ extern "C" { | |||
293 | #define SSL_TXT_MD5 "MD5" | 289 | #define SSL_TXT_MD5 "MD5" |
294 | #define SSL_TXT_SHA1 "SHA1" | 290 | #define SSL_TXT_SHA1 "SHA1" |
295 | #define SSL_TXT_SHA "SHA" /* same as "SHA1" */ | 291 | #define SSL_TXT_SHA "SHA" /* same as "SHA1" */ |
296 | #define SSL_TXT_GOST94 "GOST94" | ||
297 | #define SSL_TXT_GOST89MAC "GOST89MAC" | ||
298 | #define SSL_TXT_SHA256 "SHA256" | 292 | #define SSL_TXT_SHA256 "SHA256" |
299 | #define SSL_TXT_SHA384 "SHA384" | 293 | #define SSL_TXT_SHA384 "SHA384" |
300 | #define SSL_TXT_STREEBOG256 "STREEBOG256" | ||
301 | #define SSL_TXT_STREEBOG512 "STREEBOG512" | ||
302 | 294 | ||
303 | #define SSL_TXT_DTLS1 "DTLSv1" | 295 | #define SSL_TXT_DTLS1 "DTLSv1" |
304 | #define SSL_TXT_DTLS1_2 "DTLSv1.2" | 296 | #define SSL_TXT_DTLS1_2 "DTLSv1.2" |
@@ -2176,7 +2168,6 @@ void ERR_load_SSL_strings(void); | |||
2176 | #define SSL_R_NO_CLIENT_CERT_METHOD 331 | 2168 | #define SSL_R_NO_CLIENT_CERT_METHOD 331 |
2177 | #define SSL_R_NO_CLIENT_CERT_RECEIVED 186 | 2169 | #define SSL_R_NO_CLIENT_CERT_RECEIVED 186 |
2178 | #define SSL_R_NO_COMPRESSION_SPECIFIED 187 | 2170 | #define SSL_R_NO_COMPRESSION_SPECIFIED 187 |
2179 | #define SSL_R_NO_GOST_CERTIFICATE_SENT_BY_PEER 330 | ||
2180 | #define SSL_R_NO_METHOD_SPECIFIED 188 | 2171 | #define SSL_R_NO_METHOD_SPECIFIED 188 |
2181 | #define SSL_R_NO_PRIVATEKEY 189 | 2172 | #define SSL_R_NO_PRIVATEKEY 189 |
2182 | #define SSL_R_NO_PRIVATE_KEY_ASSIGNED 190 | 2173 | #define SSL_R_NO_PRIVATE_KEY_ASSIGNED 190 |