From 33336ca96029d7f4f2077d4f39573e29c748a5b6 Mon Sep 17 00:00:00 2001
From: kenjiro <>
Date: Fri, 7 Aug 2026 23:58:20 +0000
Subject: Restore the OCSP no-check extension method

The conversion of X509V3_EXT_get_nid() from a table to a switch
omitted the OCSP no-check extension method.

Add the missing accessor declaration and switch case.

ok tb@
---
 src/lib/libcrypto/x509/x509_lib.c   | 4 +++-
 src/lib/libcrypto/x509/x509_local.h | 3 ++-
 2 files changed, 5 insertions(+), 2 deletions(-)

(limited to 'src/lib')

diff --git a/src/lib/libcrypto/x509/x509_lib.c b/src/lib/libcrypto/x509/x509_lib.c
index 0285ac0d3a..ca9f1550bf 100644
--- a/src/lib/libcrypto/x509/x509_lib.c
+++ b/src/lib/libcrypto/x509/x509_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_lib.c,v 1.25 2025/05/10 05:54:39 tb Exp $ */
+/* $OpenBSD: x509_lib.c,v 1.26 2026/08/07 23:58:20 kenjiro Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 1999.
  */
@@ -108,6 +108,8 @@ X509V3_EXT_get_nid(int nid)
 		return x509v3_ext_method_id_pkix_OCSP_acceptableResponses();
 	case NID_id_pkix_OCSP_archiveCutoff:
 		return x509v3_ext_method_id_pkix_OCSP_archiveCutoff();
+	case NID_id_pkix_OCSP_noCheck:
+		return x509v3_ext_method_id_pkix_OCSP_noCheck();
 	case NID_id_pkix_OCSP_serviceLocator:
 		return x509v3_ext_method_id_pkix_OCSP_serviceLocator();
 #endif
diff --git a/src/lib/libcrypto/x509/x509_local.h b/src/lib/libcrypto/x509/x509_local.h
index 5b9c1e51f7..e46052b382 100644
--- a/src/lib/libcrypto/x509/x509_local.h
+++ b/src/lib/libcrypto/x509/x509_local.h
@@ -1,4 +1,4 @@
-/*	$OpenBSD: x509_local.h,v 1.39 2025/10/10 11:31:13 tb Exp $ */
+/*	$OpenBSD: x509_local.h,v 1.40 2026/08/07 23:58:20 kenjiro Exp $ */
 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project 2013.
  */
@@ -472,6 +472,7 @@ const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_CrlID(void);
 const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_Nonce(void);
 const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_acceptableResponses(void);
 const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_archiveCutoff(void);
+const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_noCheck(void);
 const X509V3_EXT_METHOD *x509v3_ext_method_id_pkix_OCSP_serviceLocator(void);
 const X509V3_EXT_METHOD *x509v3_ext_method_info_access(void);
 const X509V3_EXT_METHOD *x509v3_ext_method_inhibit_any_policy(void);
-- 
cgit v1.2.3-55-g6feb