diff options
| author | kenjiro <> | 2026-08-07 23:58:20 +0000 |
|---|---|---|
| committer | kenjiro <> | 2026-08-07 23:58:20 +0000 |
| commit | 33336ca96029d7f4f2077d4f39573e29c748a5b6 (patch) | |
| tree | 0703cef2f5d661ac2581a6c197fa46069d1a6599 /src/lib | |
| parent | e1683307f0e5157e390cc99806f974cc09ff23f0 (diff) | |
| download | openbsd-33336ca96029d7f4f2077d4f39573e29c748a5b6.tar.gz openbsd-33336ca96029d7f4f2077d4f39573e29c748a5b6.tar.bz2 openbsd-33336ca96029d7f4f2077d4f39573e29c748a5b6.zip | |
Restore the OCSP no-check extension method
The conversion of X509V3_EXT_get_nid() from a table to a switch
omitted the OCSP no-check extension method.
Add the missing accessor declaration and switch case.
ok tb@
Diffstat (limited to 'src/lib')
| -rw-r--r-- | src/lib/libcrypto/x509/x509_lib.c | 4 | ||||
| -rw-r--r-- | src/lib/libcrypto/x509/x509_local.h | 3 |
2 files changed, 5 insertions, 2 deletions
diff --git a/src/lib/libcrypto/x509/x509_lib.c b/src/lib/libcrypto/x509/x509_lib.c index 0285ac0d3a..ca9f1550bf 100644 --- a/src/lib/libcrypto/x509/x509_lib.c +++ b/src/lib/libcrypto/x509/x509_lib.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: x509_lib.c,v 1.25 2025/05/10 05:54:39 tb Exp $ */ | 1 | /* $OpenBSD: x509_lib.c,v 1.26 2026/08/07 23:58:20 kenjiro Exp $ */ |
| 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL |
| 3 | * project 1999. | 3 | * project 1999. |
| 4 | */ | 4 | */ |
| @@ -108,6 +108,8 @@ X509V3_EXT_get_nid(int nid) | |||
| 108 | return x509v3_ext_method_id_pkix_OCSP_acceptableResponses(); | 108 | return x509v3_ext_method_id_pkix_OCSP_acceptableResponses(); |
| 109 | case NID_id_pkix_OCSP_archiveCutoff: | 109 | case NID_id_pkix_OCSP_archiveCutoff: |
| 110 | return x509v3_ext_method_id_pkix_OCSP_archiveCutoff(); | 110 | return x509v3_ext_method_id_pkix_OCSP_archiveCutoff(); |
| 111 | case NID_id_pkix_OCSP_noCheck: | ||
| 112 | return x509v3_ext_method_id_pkix_OCSP_noCheck(); | ||
| 111 | case NID_id_pkix_OCSP_serviceLocator: | 113 | case NID_id_pkix_OCSP_serviceLocator: |
| 112 | return x509v3_ext_method_id_pkix_OCSP_serviceLocator(); | 114 | return x509v3_ext_method_id_pkix_OCSP_serviceLocator(); |
| 113 | #endif | 115 | #endif |
diff --git a/src/lib/libcrypto/x509/x509_local.h b/src/lib/libcrypto/x509/x509_local.h index 5b9c1e51f7..e46052b382 100644 --- a/src/lib/libcrypto/x509/x509_local.h +++ b/src/lib/libcrypto/x509/x509_local.h | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: x509_local.h,v 1.39 2025/10/10 11:31:13 tb Exp $ */ | 1 | /* $OpenBSD: x509_local.h,v 1.40 2026/08/07 23:58:20 kenjiro Exp $ */ |
| 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL |
| 3 | * project 2013. | 3 | * project 2013. |
| 4 | */ | 4 | */ |
| @@ -472,6 +472,7 @@ const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_CrlID(void); | |||
| 472 | const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_Nonce(void); | 472 | const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_Nonce(void); |
| 473 | const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_acceptableResponses(void); | 473 | const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_acceptableResponses(void); |
| 474 | const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_archiveCutoff(void); | 474 | const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_archiveCutoff(void); |
| 475 | const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_noCheck(void); | ||
| 475 | const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_serviceLocator(void); | 476 | const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_serviceLocator(void); |
| 476 | const X509V3_EXT_METHOD *x509v3_ext_method_info_access(void); | 477 | const X509V3_EXT_METHOD *x509v3_ext_method_info_access(void); |
| 477 | const X509V3_EXT_METHOD *x509v3_ext_method_inhibit_any_policy(void); | 478 | const X509V3_EXT_METHOD *x509v3_ext_method_inhibit_any_policy(void); |
