Commit b132345927 for openssl.org

commit b13234592770262abf0359bcc2842fd8a7b45259
Author: Bob Beck <beck@openssl.org>
Date:   Tue Feb 17 15:37:15 2026 -0700

    Constify X509_chain_check_suiteb

    For https://github.com/openssl/openssl/issues/30052

    Reviewed-by: Norbert Pocs <norbertp@openssl.org>
    Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com>
    Reviewed-by: Neil Horman <nhorman@openssl.org>
    MergeDate: Sun Feb 22 17:37:38 2026
    (Merged from https://github.com/openssl/openssl/pull/30058)

diff --git a/crypto/x509/x509_cmp.c b/crypto/x509/x509_cmp.c
index c83560476b..69753c2ede 100644
--- a/crypto/x509/x509_cmp.c
+++ b/crypto/x509/x509_cmp.c
@@ -470,7 +470,7 @@ static int check_suite_b(EVP_PKEY *pkey, int sign_nid, unsigned long *pflags)
     return X509_V_OK;
 }

-int X509_chain_check_suiteb(int *perror_depth, X509 *x, STACK_OF(X509) *chain,
+int X509_chain_check_suiteb(int *perror_depth, const X509 *x, STACK_OF(X509) *chain,
     unsigned long flags)
 {
     int rv, i, sign_nid;
@@ -556,7 +556,7 @@ int X509_CRL_check_suiteb(X509_CRL *crl, EVP_PKEY *pk, unsigned long flags)
 }

 #else
-int X509_chain_check_suiteb(int *perror_depth, X509 *x, STACK_OF(X509) *chain,
+int X509_chain_check_suiteb(int *perror_depth, const X509 *x, STACK_OF(X509) *chain,
     unsigned long flags)
 {
     return 0;
diff --git a/include/openssl/x509.h.in b/include/openssl/x509.h.in
index 457fd03c73..ccbb538ce1 100644
--- a/include/openssl/x509.h.in
+++ b/include/openssl/x509.h.in
@@ -782,7 +782,7 @@ int X509_REQ_check_private_key(const X509_REQ *req, EVP_PKEY *pkey);

 int X509_check_private_key(const X509 *cert, const EVP_PKEY *pkey);
 int X509_chain_check_suiteb(int *perror_depth,
-    X509 *x, STACK_OF(X509) *chain,
+    const X509 *x, STACK_OF(X509) *chain,
     unsigned long flags);
 int X509_CRL_check_suiteb(X509_CRL *crl, EVP_PKEY *pk, unsigned long flags);
 void OSSL_STACK_OF_X509_free(STACK_OF(X509) *certs);