From: Tomas Mraz <tomas@openssl.org>
Date: Wed, 1 May 2024 16:48:01 +0000 (+0200)
Subject: Set SSL_CONF_FLAG_SHOW_ERRORS when conf_diagnostics is enabled
X-Git-Tag: openssl-3.4.0-alpha1~580
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=af0561d7e7769504356e04f4b591ce79aace3ac2;p=thirdparty%2Fopenssl.git

Set SSL_CONF_FLAG_SHOW_ERRORS when conf_diagnostics is enabled

Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/24275)
---

diff --git a/ssl/ssl_mcnf.c b/ssl/ssl_mcnf.c
index 66416b61cf3..b7eb87b6b82 100644
--- a/ssl/ssl_mcnf.c
+++ b/ssl/ssl_mcnf.c
@@ -65,6 +65,8 @@ static int ssl_do_config(SSL *s, SSL_CTX *ctx, const char *name, int system)
         libctx = ctx->libctx;
     }
     conf_diagnostics = OSSL_LIB_CTX_get_conf_diagnostics(libctx);
+    if (conf_diagnostics)
+        flags |= SSL_CONF_FLAG_SHOW_ERRORS;
     if (meth->ssl_accept != ssl_undefined_function)
         flags |= SSL_CONF_FLAG_SERVER;
     if (meth->ssl_connect != ssl_undefined_function)