Remove X509V3_EXT extensibility API
authortb <tb@openbsd.org>
Sat, 2 Mar 2024 10:35:32 +0000 (10:35 +0000)
committertb <tb@openbsd.org>
Sat, 2 Mar 2024 10:35:32 +0000 (10:35 +0000)
commitd633ad37e4876f97e4448b46c1fc2696b487a574
treea1c12c7a013192fe7c468ff12efffb777f0f3190
parent4a5e4343154e9cd368a854da8c580e0cd1fe0c6f
Remove X509V3_EXT extensibility API

You used to be able to define your own X.509 extension handlers. Great.
Even greater: the verifier would ignore any custom extensions. So this
was only ever useful for serialization and deserialization. In other
words, almost entirely pointless. The API was also unused except for
a hack in kore-acme, which was fixed recently.

ok jsing
lib/libcrypto/Symbols.list
lib/libcrypto/Symbols.namespace
lib/libcrypto/hidden/openssl/x509v3.h
lib/libcrypto/x509/x509_lib.c
lib/libcrypto/x509/x509v3.h