summaryrefslogtreecommitdiff
path: root/src/lib
diff options
context:
space:
mode:
authorkenjiro <>2026-08-07 23:58:20 +0000
committerkenjiro <>2026-08-07 23:58:20 +0000
commit33336ca96029d7f4f2077d4f39573e29c748a5b6 (patch)
tree0703cef2f5d661ac2581a6c197fa46069d1a6599 /src/lib
parente1683307f0e5157e390cc99806f974cc09ff23f0 (diff)
downloadopenbsd-33336ca96029d7f4f2077d4f39573e29c748a5b6.tar.gz
openbsd-33336ca96029d7f4f2077d4f39573e29c748a5b6.tar.bz2
openbsd-33336ca96029d7f4f2077d4f39573e29c748a5b6.zip
Restore the OCSP no-check extension method
The conversion of X509V3_EXT_get_nid() from a table to a switch omitted the OCSP no-check extension method. Add the missing accessor declaration and switch case. ok tb@
Diffstat (limited to 'src/lib')
-rw-r--r--src/lib/libcrypto/x509/x509_lib.c4
-rw-r--r--src/lib/libcrypto/x509/x509_local.h3
2 files changed, 5 insertions, 2 deletions
diff --git a/src/lib/libcrypto/x509/x509_lib.c b/src/lib/libcrypto/x509/x509_lib.c
index 0285ac0d3a..ca9f1550bf 100644
--- a/src/lib/libcrypto/x509/x509_lib.c
+++ b/src/lib/libcrypto/x509/x509_lib.c
@@ -1,4 +1,4 @@
1/* $OpenBSD: x509_lib.c,v 1.25 2025/05/10 05:54:39 tb Exp $ */ 1/* $OpenBSD: x509_lib.c,v 1.26 2026/08/07 23:58:20 kenjiro Exp $ */
2/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL 2/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
3 * project 1999. 3 * project 1999.
4 */ 4 */
@@ -108,6 +108,8 @@ X509V3_EXT_get_nid(int nid)
108 return x509v3_ext_method_id_pkix_OCSP_acceptableResponses(); 108 return x509v3_ext_method_id_pkix_OCSP_acceptableResponses();
109 case NID_id_pkix_OCSP_archiveCutoff: 109 case NID_id_pkix_OCSP_archiveCutoff:
110 return x509v3_ext_method_id_pkix_OCSP_archiveCutoff(); 110 return x509v3_ext_method_id_pkix_OCSP_archiveCutoff();
111 case NID_id_pkix_OCSP_noCheck:
112 return x509v3_ext_method_id_pkix_OCSP_noCheck();
111 case NID_id_pkix_OCSP_serviceLocator: 113 case NID_id_pkix_OCSP_serviceLocator:
112 return x509v3_ext_method_id_pkix_OCSP_serviceLocator(); 114 return x509v3_ext_method_id_pkix_OCSP_serviceLocator();
113#endif 115#endif
diff --git a/src/lib/libcrypto/x509/x509_local.h b/src/lib/libcrypto/x509/x509_local.h
index 5b9c1e51f7..e46052b382 100644
--- a/src/lib/libcrypto/x509/x509_local.h
+++ b/src/lib/libcrypto/x509/x509_local.h
@@ -1,4 +1,4 @@
1/* $OpenBSD: x509_local.h,v 1.39 2025/10/10 11:31:13 tb Exp $ */ 1/* $OpenBSD: x509_local.h,v 1.40 2026/08/07 23:58:20 kenjiro Exp $ */
2/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL 2/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
3 * project 2013. 3 * project 2013.
4 */ 4 */
@@ -472,6 +472,7 @@ const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_CrlID(void);
472const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_Nonce(void); 472const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_Nonce(void);
473const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_acceptableResponses(void); 473const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_acceptableResponses(void);
474const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_archiveCutoff(void); 474const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_archiveCutoff(void);
475const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_noCheck(void);
475const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_serviceLocator(void); 476const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_serviceLocator(void);
476const X509V3_EXT_METHOD *x509v3_ext_method_info_access(void); 477const X509V3_EXT_METHOD *x509v3_ext_method_info_access(void);
477const X509V3_EXT_METHOD *x509v3_ext_method_inhibit_any_policy(void); 478const X509V3_EXT_METHOD *x509v3_ext_method_inhibit_any_policy(void);