From c9f51264d86b580ec3b3ab8a5317298c04bb1f3d Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Wed, 25 Mar 2020 15:01:36 +0000 Subject: [PATCH] Use the new OCSP functions in sslapitest.c At the moment we just use the default libctx - but a future PR will add support for running sslapitest with a non-default libctx. Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/11407) --- test/sslapitest.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/test/sslapitest.c b/test/sslapitest.c index 886ed9ad67..a9b7d20b3c 100644 --- a/test/sslapitest.c +++ b/test/sslapitest.c @@ -1278,7 +1278,7 @@ static int ocsp_server_cb(SSL *s, void *arg) return SSL_TLSEXT_ERR_ALERT_FATAL; id = sk_OCSP_RESPID_value(ids, 0); - if (id == NULL || !OCSP_RESPID_match(id, ocspcert)) + if (id == NULL || !OCSP_RESPID_match_ex(id, ocspcert, NULL, NULL)) return SSL_TLSEXT_ERR_ALERT_FATAL; } else if (*argi != 1) { return SSL_TLSEXT_ERR_ALERT_FATAL; @@ -1406,7 +1406,7 @@ static int test_tlsext_status_type(void) || !TEST_ptr(ids = sk_OCSP_RESPID_new_null()) || !TEST_ptr(ocspcert = PEM_read_bio_X509(certbio, NULL, NULL, NULL)) - || !TEST_true(OCSP_RESPID_set_by_key(id, ocspcert)) + || !TEST_true(OCSP_RESPID_set_by_key_ex(id, ocspcert, NULL, NULL)) || !TEST_true(sk_OCSP_RESPID_push(ids, id))) goto end; id = NULL; -- 2.25.1