[openssl] master update

Matt Caswell matt at openssl.org
Wed Feb 23 12:05:11 UTC 2022


The branch master has been updated
       via  7e1eda483ec9ead36c05066b45ecad618475544c (commit)
      from  8d215738a05350baa583c47a2c52371d9cff3197 (commit)


- Log -----------------------------------------------------------------
commit 7e1eda483ec9ead36c05066b45ecad618475544c
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 23 11:16:07 2022 +0000

    Fix a failure in sslapitest
    
    The SNI test in test_cert_cb_int() was always failing because it used
    SSL_CTX_new() instead of SSL_CTX_new_ex() and was therefore not using the
    correct libctx. PR #17739 amended the test to check the return value from
    SSL_CTX_new() which made the failure obvious.
    
    Fixes #17757
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
    (Merged from https://github.com/openssl/openssl/pull/17758)

-----------------------------------------------------------------------

Summary of changes:
 test/sslapitest.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/test/sslapitest.c b/test/sslapitest.c
index 8ba5d8125c..0c6a5e14c1 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -8091,7 +8091,7 @@ static int test_cert_cb_int(int prot, int tst)
         cert_cb_cnt = 0;
 
     if (tst == 2) {
-        snictx = SSL_CTX_new(TLS_server_method());
+        snictx = SSL_CTX_new_ex(libctx, NULL, TLS_server_method());
         if (!TEST_ptr(snictx))
             goto end;
     }


More information about the openssl-commits mailing list