tests: added check for GNUTLS_TL_GET_COPY

2 files changed, 14 insertions, 0 deletions

diff --git a/tests/suite/pkcs11-get-issuer.c b/tests/suite/pkcs11-get-issuer.c
index 121f208fca..c604f918b0 100644
--- a/tests/suite/pkcs11-get-issuer.c
+++ b/tests/suite/pkcs11-get-issuer.c
@@ -252,6 +252,14 @@ void doit(void)
 	}
 
 	/* extract the issuer of the certificate */
+	ret = gnutls_x509_trust_list_get_issuer(tl, certs[2], &issuer, GNUTLS_TL_GET_COPY);
+	if (ret < 0) {
+		fail("error in gnutls_x509_trust_list_get_issuer\n");
+		exit(1);
+	}
+	gnutls_x509_crt_deinit(issuer);
+
+	/* extract the issuer of the certificate using the non-thread-safe approach */
 	ret = gnutls_x509_trust_list_get_issuer(tl, certs[2], &issuer, 0);
 	if (ret < 0) {
 		fail("error in gnutls_x509_trust_list_get_issuer\n");
diff --git a/tests/x509cert.c b/tests/x509cert.c
index 853e7e78e7..2abff03bd9 100644
--- a/tests/x509cert.c
+++ b/tests/x509cert.c
@@ -196,10 +196,16 @@ void doit(void)
 	if (ret < 0)
 		fail("gnutls_certificate_get_isser");
 
+	ret =
+	    gnutls_certificate_get_issuer(x509_cred, list[0], &issuer, GNUTLS_TL_GET_COPY);
+	if (ret < 0)
+		fail("gnutls_certificate_get_isser");
+
 	dn_size = sizeof(dn);
 	ret = gnutls_x509_crt_get_dn(issuer, dn, &dn_size);
 	if (ret < 0)
 		fail("gnutls_certificate_get_isser");
+	gnutls_x509_crt_deinit(issuer);
 
 	if (debug)
 		fprintf(stderr, "Issuer's DN: %s\n", dn);