The diff below removes code which has been disabled since 1998 or maybe even before.
https://github.com/openssl/openssl/blame/master/ssl/ssl.h#L1758-L1764 There is a lot of interesting backwards compatibility stuff before and after this piece of code. I have a diff for the SSL_(set|get)_(time|timeout) stuff. The SSL_get_cipher_* defines seem to be actually used quite a bit according to github. https://github.com/search?q=SSL_get_cipher+extension%3Ac+language%3Ac&type=Code&ref=searchresults https://github.com/search?q=SSL_get_cipher_bits+extension%3Ac+language%3Ac&type=Code&ref=searchresults https://github.com/search?q=SSL_get_cipher_version+extension%3Ac+language%3Ac&type=Code&ref=searchresults https://github.com/search?q=SSL_get_cipher_name+extension%3Ac+language%3Ac&type=Code&ref=searchresults OpenSSL_add_ssl_algorithms and SSLeay_add_ssl_algorithms too: https://github.com/search?q=OpenSSL_add_ssl_algorithms+extension%3Ac+language%3Ac&type=Code&ref=searchresults https://github.com/search?q=SSLeay_add_ssl_algorithms+extension%3Ac+language%3Ac&type=Code&ref=searchresults I don't know how github results translates into the actually usage in the OpenBSD ports tree. Index: src/ssl/ssl.h =================================================================== RCS file: /backup/mirrors/cvsync/src/lib/libssl/src/ssl/ssl.h,v retrieving revision 1.42 diff -u -p -r1.42 ssl.h --- src/ssl/ssl.h 25 May 2014 13:27:38 -0000 1.42 +++ src/ssl/ssl.h 29 May 2014 14:34:19 -0000 @@ -1364,14 +1364,6 @@ size_t SSL_get_peer_finished(const SSL * #define OpenSSL_add_ssl_algorithms() SSL_library_init() #define SSLeay_add_ssl_algorithms() SSL_library_init() -/* this is for backward compatibility */ -#if 0 /* NEW_SSLEAY */ -#define SSL_CTX_set_default_verify(a,b,c) SSL_CTX_set_verify(a,b,c) -#define SSL_set_pref_cipher(c,n) SSL_set_cipher_list(c,n) -#define SSL_add_session(a,b) SSL_CTX_add_session((a),(b)) -#define SSL_remove_session(a,b) SSL_CTX_remove_session((a),(b)) -#define SSL_flush_sessions(a,b) SSL_CTX_flush_sessions((a),(b)) -#endif /* More backward compatibility */ #define SSL_get_cipher(s) \ SSL_CIPHER_get_name(SSL_get_current_cipher(s))
