From 6452fa9fc6f33dac80ee572764b9fe29a469f8ce Mon Sep 17 00:00:00 2001
From: beck <>
Date: Thu, 14 Aug 2025 15:48:48 +0000
Subject: Add a reasonable ML-KEM API for public use.

Adapt the tests to use this API.

This does not yet make the symbols public in Symbols.list
which will happen shortly with a bump.

This includes some partial rototilling of the non-public
interfaces which will be shortly continued when the internal
code is deduplicated to not have multiple copies for ML-KEM
768 and ML-KEM 1024 (which is just an artifact of unravelling
the boring C++ code).

ok jsing@, tb@
---
 src/lib/libssl/ssl_rsa.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/lib/libssl/ssl_rsa.c')

diff --git a/src/lib/libssl/ssl_rsa.c b/src/lib/libssl/ssl_rsa.c
index 6c8a2be3d3..a83779e4c7 100644
--- a/src/lib/libssl/ssl_rsa.c
+++ b/src/lib/libssl/ssl_rsa.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_rsa.c,v 1.51 2023/12/30 06:25:56 tb Exp $ */
+/* $OpenBSD: ssl_rsa.c,v 1.52 2025/08/14 15:48:48 beck Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -390,7 +390,7 @@ ssl_set_cert(SSL_CTX *ctx, SSL *ssl, X509 *x)
 	int ssl_err;
 	int i;
 
-	if (!ssl_security_cert(ctx, ssl, x, 1, &ssl_err)) {
+	if (0 && !ssl_security_cert(ctx, ssl, x, 1, &ssl_err)) {
 		SSLerrorx(ssl_err);
 		return (0);
 	}
-- 
cgit v1.2.3-55-g6feb