From ea9f6890eb54e4b9e8b81cc1318ca3a6fc0c8356 Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Thu, 6 Aug 2020 15:14:29 +0200 Subject: sslapitest: Add test for premature call of SSL_export_keying_material Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/12594) --- test/sslapitest.c | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) (limited to 'test/sslapitest.c') diff --git a/test/sslapitest.c b/test/sslapitest.c index 3d6d83a11a..6f4c11537b 100644 --- a/test/sslapitest.c +++ b/test/sslapitest.c @@ -5690,9 +5690,20 @@ static int test_export_key_mat(int tst) goto end; if (!TEST_true(create_ssl_objects(sctx, cctx, &serverssl, &clientssl, NULL, - NULL)) - || !TEST_true(create_ssl_connection(serverssl, clientssl, - SSL_ERROR_NONE))) + NULL))) + goto end; + + /* + * Premature call of SSL_export_keying_material should just fail. + */ + if (!TEST_int_le(SSL_export_keying_material(clientssl, ckeymat1, + sizeof(ckeymat1), label, + SMALL_LABEL_LEN + 1, context, + sizeof(context) - 1, 1), 0)) + goto end; + + if (!TEST_true(create_ssl_connection(serverssl, clientssl, + SSL_ERROR_NONE))) goto end; if (tst == 5) { -- cgit v1.2.3