From bb9c317771d27a23a2a42ee8d232a26e4d55b58f Mon Sep 17 00:00:00 2001
From: jsing <>
Date: Sat, 10 Feb 2018 04:33:47 +0000
Subject: Expose X509_VERIFY_PARAM_* functions that appeared in the OpenSSL
 1.0.2 API and are now in use by various libraries and applications.

---
 src/lib/libcrypto/Symbols.list    | 10 ++++++++++
 src/lib/libcrypto/x509/x509_vfy.h | 17 ++++++++++++++++-
 2 files changed, 26 insertions(+), 1 deletion(-)

(limited to 'src')

diff --git a/src/lib/libcrypto/Symbols.list b/src/lib/libcrypto/Symbols.list
index d8e38c8f04..239b106ae3 100644
--- a/src/lib/libcrypto/Symbols.list
+++ b/src/lib/libcrypto/Symbols.list
@@ -2816,6 +2816,16 @@ X509_VERIFY_PARAM_set_purpose
 X509_VERIFY_PARAM_set_time
 X509_VERIFY_PARAM_set_trust
 X509_VERIFY_PARAM_table_cleanup
+X509_VERIFY_PARAM_set1_host
+X509_VERIFY_PARAM_add1_host
+X509_VERIFY_PARAM_set_hostflags
+X509_VERIFY_PARAM_get0_peername
+X509_VERIFY_PARAM_set1_email
+X509_VERIFY_PARAM_set1_ip
+X509_VERIFY_PARAM_set1_ip_asc
+X509_VERIFY_PARAM_get0_name
+X509_VERIFY_PARAM_get0
+X509_VERIFY_PARAM_get_count
 X509_add1_ext_i2d
 X509_add1_reject_object
 X509_add1_trust_object
diff --git a/src/lib/libcrypto/x509/x509_vfy.h b/src/lib/libcrypto/x509/x509_vfy.h
index b58d49d2e1..a9cf7e0eda 100644
--- a/src/lib/libcrypto/x509/x509_vfy.h
+++ b/src/lib/libcrypto/x509/x509_vfy.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_vfy.h,v 1.18 2016/12/21 15:15:45 jsing Exp $ */
+/* $OpenBSD: x509_vfy.h,v 1.19 2018/02/10 04:33:47 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -542,6 +542,21 @@ int X509_VERIFY_PARAM_add0_policy(X509_VERIFY_PARAM *param,
 int X509_VERIFY_PARAM_set1_policies(X509_VERIFY_PARAM *param, 
 					STACK_OF(ASN1_OBJECT) *policies);
 int X509_VERIFY_PARAM_get_depth(const X509_VERIFY_PARAM *param);
+int X509_VERIFY_PARAM_set1_host(X509_VERIFY_PARAM *param, const char *name,
+    size_t namelen);
+int X509_VERIFY_PARAM_add1_host(X509_VERIFY_PARAM *param, const char *name,
+    size_t namelen);
+void X509_VERIFY_PARAM_set_hostflags(X509_VERIFY_PARAM *param,
+    unsigned int flags);
+char *X509_VERIFY_PARAM_get0_peername(X509_VERIFY_PARAM *param);
+int X509_VERIFY_PARAM_set1_email(X509_VERIFY_PARAM *param,  const char *email,
+    size_t emaillen);
+int X509_VERIFY_PARAM_set1_ip(X509_VERIFY_PARAM *param, const unsigned char *ip,
+    size_t iplen);
+int X509_VERIFY_PARAM_set1_ip_asc(X509_VERIFY_PARAM *param, const char *ipasc);
+const char *X509_VERIFY_PARAM_get0_name(const X509_VERIFY_PARAM *param);
+const X509_VERIFY_PARAM *X509_VERIFY_PARAM_get0(int id);
+int X509_VERIFY_PARAM_get_count(void);
 
 int X509_VERIFY_PARAM_add0_table(X509_VERIFY_PARAM *param);
 const X509_VERIFY_PARAM *X509_VERIFY_PARAM_lookup(const char *name);
-- 
cgit v1.2.3-55-g6feb