CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2024/03/02 03:35:32
Modified files:
lib/libcrypto : Symbols.list Symbols.namespace
lib/libcrypto/hidden/openssl: x509v3.h
lib/libcrypto/x509: x509_lib.c x509v3.h
Log message:
Remove X509V3_EXT extensibility API
You used to be able to define your own X.509 extension handlers. Great.
Even greater: the verifier would ignore any custom extensions. So this
was only ever useful for serialization and deserialization. In other
words, almost entirely pointless. The API was also unused except for
a hack in kore-acme, which was fixed recently.
ok jsing
