commit 7e1eda483ec9ead36c05066b45ecad618475544c
author Matt Caswell <matt@openssl.org> Wed Feb 23 11:16:07 2022 +0000
committer Matt Caswell <matt@openssl.org> Wed Feb 23 11:49:48 2022 +0000
tree 822e5e682dc2ae35de4463525fb0c58d0016bdf7
parent 8d215738a05350baa583c47a2c52371d9cff3197

Fix a failure in sslapitest

The SNI test in test_cert_cb_int() was always failing because it used
SSL_CTX_new() instead of SSL_CTX_new_ex() and was therefore not using the
correct libctx. PR #17739 amended the test to check the return value from
SSL_CTX_new() which made the failure obvious.

Fixes #17757

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/17758)

test/sslapitest.c

diff --git a/test/sslapitest.c b/test/sslapitest.c
index 8ba5d81..0c6a5e1 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -8091,7 +8091,7 @@
         cert_cb_cnt = 0;
 
     if (tst == 2) {
-        snictx = SSL_CTX_new(TLS_server_method());
+        snictx = SSL_CTX_new_ex(libctx, NULL, TLS_server_method());
         if (!TEST_ptr(snictx))
             goto end;
     }