Guard wolfSSL_CTX_set_alpn_protos with HAVE_ALPN

[holtrop-wolfssl]

Description

This was found while investigating F-10717.

This does not change the default build options which is the main thing that F-10717 is identifying. Rather, a secondary finding related was that the wolfSSL_CTX_set_alpn_protos function was not guarded by HAVE_ALPN. I moved the guard in ssl_api_ext.c up so that wolfSSL_CTX_set_alpn_protos is guarded the same as wolfSSL_set_alpn_protos below it.

Testing

How did you test?

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

Pull request overview

This PR aligns the OpenSSL-compat ALPN API surface so wolfSSL_CTX_set_alpn_protos() is only available when ALPN support is actually compiled in (HAVE_ALPN) and BIO is available (!NO_BIO), matching the existing guard pattern used for wolfSSL_set_alpn_protos().

Changes:

• Guarded wolfSSL_CTX_set_alpn_protos() (and its header declaration) with HAVE_ALPN && !NO_BIO.
• Moved the implementation guard in src/ssl_api_ext.c so both ALPN “set protos” functions share the same compile-time conditions.
• Updated API tests to only reference wolfSSL_CTX_set_alpn_protos() when the symbol is available.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
wolfssl/ssl.h	Wraps wolfSSL_CTX_set_alpn_protos() / wolfSSL_set_alpn_protos() declarations with HAVE_ALPN && !NO_BIO under OPENSSL_EXTRA.
src/ssl_api_ext.c	Moves HAVE_ALPN / !NO_BIO guards upward to include wolfSSL_CTX_set_alpn_protos().
tests/api/test_ssl_ext.c	Updates the invalid-args test guard to include HAVE_ALPN && !NO_BIO.
tests/api.c	Avoids defining/using ALPN protos variables unless OPENSSL_EXTRA && HAVE_ALPN && !NO_BIO, matching availability.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

MemBrowse Memory Report

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• linuxkm-pie
• linuxkm-standard
• stm32-sim-stm32h753

[holtrop-wolfssl]

retest this please (ERROR: Build 'PRB-generic-config-parser' failed with result: FAILURE)

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #11232

Scan targets checked: wolfcrypt-rs-bugs, wolfssl-bugs, wolfssl-src

No new issues found in the changed files. ✅