[openssl] openssl-3.0 update

Matt Caswell matt at openssl.org
Wed Feb 23 12:05:21 UTC 2022


The branch openssl-3.0 has been updated
       via  9c1973e1c57d7de4d57f10545b3e9c921b34df23 (commit)
      from  0ec286a62840c2a0de4b7a1b5063ace3338a925f (commit)


- Log -----------------------------------------------------------------
commit 9c1973e1c57d7de4d57f10545b3e9c921b34df23
Author: Matt Caswell <matt at openssl.org>
Date:   Wed Feb 23 11:16:07 2022 +0000

    Fix a failure in sslapitest
    
    The SNI test in test_cert_cb_int() was always failing because it used
    SSL_CTX_new() instead of SSL_CTX_new_ex() and was therefore not using the
    correct libctx. PR #17739 amended the test to check the return value from
    SSL_CTX_new() which made the failure obvious.
    
    Fixes #17757
    
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
    (Merged from https://github.com/openssl/openssl/pull/17758)
    
    (cherry picked from commit 7e1eda483ec9ead36c05066b45ecad618475544c)

-----------------------------------------------------------------------

Summary of changes:
 test/sslapitest.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/test/sslapitest.c b/test/sslapitest.c
index b2f3471548..de2eeec3e8 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -8075,7 +8075,7 @@ static int test_cert_cb_int(int prot, int tst)
         cert_cb_cnt = 0;
 
     if (tst == 2) {
-        snictx = SSL_CTX_new(TLS_server_method());
+        snictx = SSL_CTX_new_ex(libctx, NULL, TLS_server_method());
         if (!TEST_ptr(snictx))
             goto end;
     }


More information about the openssl-commits mailing list