Test that we can negotiate TLSv1.3 if we have an SNI callback
authorMatt Caswell <matt@openssl.org>
Tue, 3 Nov 2020 15:51:23 +0000 (15:51 +0000)
committerMatt Caswell <matt@openssl.org>
Thu, 10 Dec 2020 11:34:23 +0000 (11:34 +0000)
commitad8e83cf11187388c71cfbdb70880d9e7ed26e0e
treed5f6e53dbf3cf25e4299a3f6e4dd6812f647f743
parente0b139b845341b62a18b7f285d34921340dc4ab9
Test that we can negotiate TLSv1.3 if we have an SNI callback

If an SNI callback has been set then we may have no certificuates suitable
for TLSv1.3 use configured for the current SSL_CTX. This should not prevent
us from negotiating TLSv1.3, since we may change the SSL_CTX by the time we
need a suitable certificate.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13305)
test/sslapitest.c