From bb1a2b0bc26345c9c52fa57aebfca43c2a1e8e60 Mon Sep 17 00:00:00 2001
From: tb <>
Date: Sat, 2 Mar 2024 10:35:32 +0000
Subject: Remove X509V3_EXT extensibility API

You used to be able to define your own X.509 extension handlers. Great.
Even greater: the verifier would ignore any custom extensions. So this
was only ever useful for serialization and deserialization. In other
words, almost entirely pointless. The API was also unused except for
a hack in kore-acme, which was fixed recently.

ok jsing
---
 src/lib/libcrypto/hidden/openssl/x509v3.h | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

(limited to 'src/lib/libcrypto/hidden')

diff --git a/src/lib/libcrypto/hidden/openssl/x509v3.h b/src/lib/libcrypto/hidden/openssl/x509v3.h
index a85c5c26aa..67f6a85bc4 100644
--- a/src/lib/libcrypto/hidden/openssl/x509v3.h
+++ b/src/lib/libcrypto/hidden/openssl/x509v3.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509v3.h,v 1.5 2023/07/05 21:14:54 bcook Exp $ */
+/* $OpenBSD: x509v3.h,v 1.6 2024/03/02 10:35:32 tb Exp $ */
 /*
  * Copyright (c) 2022 Bob Beck <beck@openbsd.org>
  *
@@ -160,10 +160,6 @@ LCRYPTO_USED(i2s_ASN1_INTEGER);
 LCRYPTO_USED(s2i_ASN1_INTEGER);
 LCRYPTO_USED(i2s_ASN1_ENUMERATED);
 LCRYPTO_USED(i2s_ASN1_ENUMERATED_TABLE);
-LCRYPTO_USED(X509V3_EXT_add);
-LCRYPTO_USED(X509V3_EXT_add_list);
-LCRYPTO_USED(X509V3_EXT_add_alias);
-LCRYPTO_USED(X509V3_EXT_cleanup);
 LCRYPTO_USED(X509V3_EXT_get);
 LCRYPTO_USED(X509V3_EXT_get_nid);
 LCRYPTO_USED(X509V3_add_standard_extensions);
-- 
cgit v1.2.3-55-g6feb