Prepare to provide SSL_set_hostflags()

Yet another one of these X509_VERIFY_PARAM reacharounds into
libcrypto. Recently found in imapfilter, also used elsewhere.
Will be made publicly visible with the next minor bump.

ok jsing

1 files changed, 7 insertions, 1 deletions

diff --git a/src/lib/libssl/ssl_lib.c b/src/lib/libssl/ssl_lib.c
index e0e0ae4ff1..3a69adbc27 100644
--- a/src/lib/libssl/ssl_lib.c
+++ b/src/lib/libssl/ssl_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_lib.c,v 1.241 2021/01/26 14:22:19 jsing Exp $ */
+/* $OpenBSD: ssl_lib.c,v 1.242 2021/01/26 18:43:41 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -469,6 +469,12 @@ SSL_set1_host(SSL *s, const char *hostname)
                 return X509_VERIFY_PARAM_set1_host(s->param, hostname, 0);
 }
 
+void
+SSL_set_hostflags(SSL *s, unsigned int flags)
+{
+        X509_VERIFY_PARAM_set_hostflags(s->param, flags);
+}
+
 const char *
 SSL_get0_peername(SSL *s)
 {