diff options
author | tb <> | 2025-10-10 11:31:13 +0000 |
---|---|---|
committer | tb <> | 2025-10-10 11:31:13 +0000 |
commit | e6eb3281afe75c88fe14724ae36ddb51a2369a78 (patch) | |
tree | 13a7544f2b68ffbe44df2dc75cbb384a3cc9ac50 /src/regress/lib/libssl/unit/ssl_verify_param.c | |
parent | 1e4b66632494f1193c5f5366fc060704063c72fc (diff) | |
download | openbsd-e6eb3281afe75c88fe14724ae36ddb51a2369a78.tar.gz openbsd-e6eb3281afe75c88fe14724ae36ddb51a2369a78.tar.bz2 openbsd-e6eb3281afe75c88fe14724ae36ddb51a2369a78.zip |
Remove unused sequence member from x509_revoked_st
To allow binary search for looking up if a cert was revoked in a CRL,
the list of revoked serial numbers is sorted in crl_lookup(). On the
other hand, to be able to output the DER that was actually signed by
the issuer, the original order needs to be remembered.
Before the encoding was cached, there was a mechanism that would restore
the original order on serialization using the .sequence member. This was
done without a lock and was thus racy (hilarity would ensue if one thread
performed a CRL lookup while another thread serialized the same CRL). When
the racy mechanism was removed in 2004, the only reader of .sequence,
X509_REVOKED_seq_cmp(), was also removed, and this piece of dead code was
left behind. Garbage collect it.
ok kenjiro
Diffstat (limited to 'src/regress/lib/libssl/unit/ssl_verify_param.c')
0 files changed, 0 insertions, 0 deletions