From: Frederic Lecaille <flecaille@haproxy.com>
Date: Thu, 6 Feb 2025 09:48:25 +0000 (+0100)
Subject: BUILD: ssl: remove a boringssl definition defined by recent boringssl libs
X-Git-Tag: v3.2-dev5~34
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=85cb1cc7f4bfeccde4c3f92db8f48c738073bbb1;p=thirdparty%2Fhaproxy.git

BUILD: ssl: remove a boringssl definition defined by recent boringssl libs

This is the case for AWS-LC which derives from boringssl, where
X509_OBJECT_get0_X509_CRL() is already defined. There is definitively
no more need to define this function to build haproxy against TLS libs derived
from boringssl.
---

diff --git a/include/haproxy/openssl-compat.h b/include/haproxy/openssl-compat.h
index ba3fd4e50..f98aa7949 100644
--- a/include/haproxy/openssl-compat.h
+++ b/include/haproxy/openssl-compat.h
@@ -192,19 +192,6 @@ static inline STACK_OF(X509) *X509_chain_up_ref(STACK_OF(X509) *chain)
 
 #endif
 
-#ifdef OPENSSL_IS_BORINGSSL
-/*
- * Functions missing in BoringSSL
- */
-
-static inline X509_CRL *X509_OBJECT_get0_X509_CRL(const X509_OBJECT *a)
-{
-    if (a == NULL || a->type != X509_LU_CRL) {
-        return NULL;
-    }
-    return a->data.crl;
-}
-#endif
 
 #if (HA_OPENSSL_VERSION_NUMBER < 0x1010000fL) && (!defined(LIBRESSL_VERSION_NUMBER) || LIBRESSL_VERSION_NUMBER < 0x2070000fL)
 /*