From: Tomas Mraz <tmraz@fedoraproject.org>
Date: Thu, 6 Aug 2020 13:14:29 +0000 (+0200)
Subject: sslapitest: Add test for premature call of SSL_export_keying_material
X-Git-Tag: openssl-3.0.0-alpha7~574
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ea9f6890eb54e4b9e8b81cc1318ca3a6fc0c8356;p=thirdparty%2Fopenssl.git

sslapitest: Add test for premature call of SSL_export_keying_material

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12594)
---

diff --git a/test/sslapitest.c b/test/sslapitest.c
index 3d6d83a11a1..6f4c11537b0 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -5690,9 +5690,20 @@ static int test_export_key_mat(int tst)
         goto end;
 
     if (!TEST_true(create_ssl_objects(sctx, cctx, &serverssl, &clientssl, NULL,
-                                      NULL))
-            || !TEST_true(create_ssl_connection(serverssl, clientssl,
-                                                SSL_ERROR_NONE)))
+                                      NULL)))
+        goto end;
+
+    /*
+     * Premature call of SSL_export_keying_material should just fail.
+     */
+    if (!TEST_int_le(SSL_export_keying_material(clientssl, ckeymat1,
+                                                sizeof(ckeymat1), label,
+                                                SMALL_LABEL_LEN + 1, context,
+                                                sizeof(context) - 1, 1), 0))
+        goto end;
+
+    if (!TEST_true(create_ssl_connection(serverssl, clientssl,
+                                         SSL_ERROR_NONE)))
         goto end;
 
     if (tst == 5) {