diff options
| author | Rob Percival <robpercival@google.com> | 2016-08-23 12:52:43 +0100 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2016-08-23 20:12:25 +0100 |
| commit | cdb2a60347f988037d29adc7e4415e9c66c8a5a5 (patch) | |
| tree | ce213a2202bbbbe21c33014db2d1ecef97c7a71a /include | |
| parent | 5579eab9efd2c8e2f21340f9b9fe20ee89f25857 (diff) | |
| download | openssl-cdb2a60347f988037d29adc7e4415e9c66c8a5a5.tar.gz | |
Internalizes SCT_verify and removes SCT_verify_v1
SCT_verify is impossible to call through the public API (SCT_CTX_new() is
not part of the public API), so rename it to SCT_CTX_verify and move it
out of the public API.
SCT_verify_v1 is redundant, since SCT_validate does the same verification
(by calling SCT_verify) and more. The API is less confusing with a single
verification function (SCT_validate).
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Diffstat (limited to 'include')
| -rw-r--r-- | include/openssl/ct.h | 16 |
1 files changed, 1 insertions, 15 deletions
diff --git a/include/openssl/ct.h b/include/openssl/ct.h index e753fc94b8..a0314f01e4 100644 --- a/include/openssl/ct.h +++ b/include/openssl/ct.h @@ -271,19 +271,6 @@ void SCT_LIST_print(const STACK_OF(SCT) *sct_list, BIO *out, int indent, const char *separator, const CTLOG_STORE *logs); /* - * Verifies an SCT with the given context. - * Returns 1 if the SCT verifies successfully, 0 otherwise. - */ -__owur int SCT_verify(const SCT_CTX *sctx, const SCT *sct); - -/* - * Verifies an SCT against the provided data. - * Returns 1 if the SCT verifies successfully, 0 otherwise. - */ -__owur int SCT_verify_v1(SCT *sct, X509 *cert, X509 *preissuer, - X509_PUBKEY *log_pubkey, X509 *issuer_cert); - -/* * Gets the last result of validating this SCT. * If it has not been validated yet, returns SCT_VALIDATION_STATUS_NOT_SET. */ @@ -518,8 +505,7 @@ int ERR_load_CT_strings(void); # define CT_F_SCT_SET_LOG_ENTRY_TYPE 102 # define CT_F_SCT_SET_SIGNATURE_NID 103 # define CT_F_SCT_SET_VERSION 104 -# define CT_F_SCT_VERIFY 128 -# define CT_F_SCT_VERIFY_V1 129 +# define CT_F_SCT_CTX_VERIFY 128 /* Reason codes. */ # define CT_R_BASE64_DECODE_ERROR 108 |