Remove SRP and Kerberos support from libssl. These are complex protocols

all on their own and we can't effectively maintain them without using them,
which we don't. If the need arises, the code can be resurrected.

1 files changed, 0 insertions, 19 deletions

diff --git a/src/lib/libssl/ssl_txt.c b/src/lib/libssl/ssl_txt.c
index c6bfd68de6..01dd846596 100644
--- a/src/lib/libssl/ssl_txt.c
+++ b/src/lib/libssl/ssl_txt.c
@@ -161,19 +161,6 @@ SSL_SESSION_print(BIO *bp, const SSL_SESSION *x)
                 if (BIO_printf(bp, "%02X", x->master_key[i]) <= 0)
                         goto err;
         }
-#ifndef OPENSSL_NO_KRB5
-        if (BIO_puts(bp, "\n    Krb5 Principal: ") <= 0)
-                goto err;
-        if (x->krb5_client_princ_len == 0) {
-                if (BIO_puts(bp, "None") <= 0)
-                        goto err;
-        } else {
-                for (i = 0; i < x->krb5_client_princ_len; i++) {
-                        if (BIO_printf(bp, "%02X", x->krb5_client_princ[i]) <= 0)
-                                goto err;
-                }
-        }
-#endif /* OPENSSL_NO_KRB5 */
 #ifndef OPENSSL_NO_PSK
         if (BIO_puts(bp, "\n    PSK identity: ") <= 0)
                 goto err;
@@ -184,12 +171,6 @@ SSL_SESSION_print(BIO *bp, const SSL_SESSION *x)
         if (BIO_printf(bp, "%s", x->psk_identity_hint ? x->psk_identity_hint : "None") <= 0)
                 goto err;
 #endif
-#ifndef OPENSSL_NO_SRP
-        if (BIO_puts(bp, "\n    SRP username: ") <= 0)
-                goto err;
-        if (BIO_printf(bp, "%s", x->srp_username ? x->srp_username : "None") <= 0)
-                goto err;
-#endif
 #ifndef OPENSSL_NO_TLSEXT
         if (x->tlsext_tick_lifetime_hint) {
                 if (BIO_printf(bp,