Set SSL_CONF_FLAG_SHOW_ERRORS when conf_diagnostics is enabled

Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24275)

diff --git a/ssl/ssl_mcnf.c b/ssl/ssl_mcnf.c
index 66416b61cf3301c83eee9b6df1724dbec04669bd..b7eb87b6b8241971f09dee23c360f494d415cdcd 100644 (file)
--- a/ssl/ssl_mcnf.c
+++ b/ssl/ssl_mcnf.c
@@ -65,6 +65,8 @@ static int ssl_do_config(SSL *s, SSL_CTX *ctx, const char *name, int system)
         libctx = ctx->libctx;
     }
     conf_diagnostics = OSSL_LIB_CTX_get_conf_diagnostics(libctx);
+    if (conf_diagnostics)
+        flags |= SSL_CONF_FLAG_SHOW_ERRORS;
     if (meth->ssl_accept != ssl_undefined_function)
         flags |= SSL_CONF_FLAG_SERVER;
     if (meth->ssl_connect != ssl_undefined_function)