From 7cf910209b8c19059d2454d770b7774814cfdc6e Mon Sep 17 00:00:00 2001
From: tb <>
Date: Tue, 4 Mar 2025 08:43:25 +0000
Subject: unifdef OPENSSL_NO_CHAIN_VERIFY

ok jsing
---
 src/lib/libcrypto/x509/x509_vfy.c | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/src/lib/libcrypto/x509/x509_vfy.c b/src/lib/libcrypto/x509/x509_vfy.c
index 5384686251..c93ae81bd8 100644
--- a/src/lib/libcrypto/x509/x509_vfy.c
+++ b/src/lib/libcrypto/x509/x509_vfy.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_vfy.c,v 1.146 2025/02/08 10:12:00 tb Exp $ */
+/* $OpenBSD: x509_vfy.c,v 1.147 2025/03/04 08:43:25 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -705,9 +705,6 @@ x509_vfy_get_trusted_issuer(X509 **issuer, X509_STORE_CTX *ctx, X509 *x)
 int
 x509_vfy_check_chain_extensions(X509_STORE_CTX *ctx)
 {
-#ifdef OPENSSL_NO_CHAIN_VERIFY
-	return 1;
-#else
 	int i, ok = 0, must_be_ca, plen = 0;
 	X509 *x;
 	int (*cb)(int xok, X509_STORE_CTX *xctx);
@@ -798,11 +795,11 @@ x509_vfy_check_chain_extensions(X509_STORE_CTX *ctx)
 			plen++;
 		must_be_ca = 1;
 	}
+
 	ok = 1;
 
-end:
+ end:
 	return ok;
-#endif
 }
 
 static int
-- 
cgit v1.2.3-55-g6feb