Fix a failure in sslapitest
authorMatt Caswell <matt@openssl.org>
Wed, 23 Feb 2022 11:16:07 +0000 (11:16 +0000)
committerMatt Caswell <matt@openssl.org>
Wed, 23 Feb 2022 11:49:48 +0000 (11:49 +0000)
The SNI test in test_cert_cb_int() was always failing because it used
SSL_CTX_new() instead of SSL_CTX_new_ex() and was therefore not using the
correct libctx. PR #17739 amended the test to check the return value from
SSL_CTX_new() which made the failure obvious.

Fixes #17757

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/17758)

test/sslapitest.c

index 8ba5d8125c8f3f29de490e3ed9bbf78a89929552..0c6a5e14c1d20697cd307f6281e07483e9e366dc 100644 (file)
@@ -8091,7 +8091,7 @@ static int test_cert_cb_int(int prot, int tst)
         cert_cb_cnt = 0;
 
     if (tst == 2) {
-        snictx = SSL_CTX_new(TLS_server_method());
+        snictx = SSL_CTX_new_ex(libctx, NULL, TLS_server_method());
         if (!TEST_ptr(snictx))
             goto end;
     }