Refactor use_certificate_chain_* to take ssl/ctx instead of a cert

ok beck jsing

1 files changed, 10 insertions, 1 deletions

diff --git a/src/lib/libssl/ssl_cert.c b/src/lib/libssl/ssl_cert.c
index ecf8179d51..21937f8513 100644
--- a/src/lib/libssl/ssl_cert.c
+++ b/src/lib/libssl/ssl_cert.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_cert.c,v 1.98 2022/06/29 21:08:07 tb Exp $ */
+/* $OpenBSD: ssl_cert.c,v 1.99 2022/06/29 21:12:19 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -302,6 +302,15 @@ ssl_cert_free(SSL_CERT *c)
         free(c);
 }
 
+SSL_CERT *
+ssl_get0_cert(SSL_CTX *ctx, SSL *ssl)
+{
+        if (ssl != NULL)
+                return ssl->cert;
+
+        return ctx->internal->cert;
+}
+
 int
 ssl_cert_set0_chain(SSL_CERT *c, STACK_OF(X509) *chain)
 {