summaryrefslogtreecommitdiff
path: root/src/regress/lib/libssl/unit/ssl_verify_param.c
diff options
context:
space:
mode:
authortb <>2025-10-10 11:31:13 +0000
committertb <>2025-10-10 11:31:13 +0000
commite6eb3281afe75c88fe14724ae36ddb51a2369a78 (patch)
tree13a7544f2b68ffbe44df2dc75cbb384a3cc9ac50 /src/regress/lib/libssl/unit/ssl_verify_param.c
parent1e4b66632494f1193c5f5366fc060704063c72fc (diff)
downloadopenbsd-e6eb3281afe75c88fe14724ae36ddb51a2369a78.tar.gz
openbsd-e6eb3281afe75c88fe14724ae36ddb51a2369a78.tar.bz2
openbsd-e6eb3281afe75c88fe14724ae36ddb51a2369a78.zip
Remove unused sequence member from x509_revoked_st
To allow binary search for looking up if a cert was revoked in a CRL, the list of revoked serial numbers is sorted in crl_lookup(). On the other hand, to be able to output the DER that was actually signed by the issuer, the original order needs to be remembered. Before the encoding was cached, there was a mechanism that would restore the original order on serialization using the .sequence member. This was done without a lock and was thus racy (hilarity would ensue if one thread performed a CRL lookup while another thread serialized the same CRL). When the racy mechanism was removed in 2004, the only reader of .sequence, X509_REVOKED_seq_cmp(), was also removed, and this piece of dead code was left behind. Garbage collect it. ok kenjiro
Diffstat (limited to 'src/regress/lib/libssl/unit/ssl_verify_param.c')
0 files changed, 0 insertions, 0 deletions