getinfo: repair CURLINFO_TLS_SESSION

[bagder]

This should return a SSL_CTX pointer but it was accidentally broken.

Follow-up to 2db8ae4

Spotted by Codex Security

[Copilot]

Pull request overview

Fixes curl_easy_getinfo() handling of CURLINFO_TLS_SESSION so it again returns the legacy TLS “session” internal pointer (e.g., SSL_CTX* for OpenSSL / WOLFSSL_CTX* for wolfSSL), which had regressed and started returning the same pointer as CURLINFO_TLS_SSL_PTR.

Changes:

• Select the appropriate cfilter query (CF_QUERY_SSL_INFO vs CF_QUERY_SSL_CTX_INFO) depending on whether CURLINFO_TLS_SSL_PTR or CURLINFO_TLS_SESSION is requested.
• Extend Curl_conn_get_ssl_info() to accept a query parameter and pass it through to the connection filter chain.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
lib/getinfo.c	Uses CF_QUERY_SSL_CTX_INFO for CURLINFO_TLS_SESSION to restore SSL_CTX/WOLFSSL_CTX semantics.
lib/cfilters.h	Updates Curl_conn_get_ssl_info() declaration to accept a query selector.
lib/cfilters.c	Updates Curl_conn_get_ssl_info() definition to forward the requested query type to cft->query().

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[bagder]

augment review

[augmentcode]

🤖 Augment PR Summary

Summary: Repairs the legacy behavior of CURLINFO_TLS_SESSION so it again returns an SSL_CTX* (instead of the active SSL*) for OpenSSL-family backends, matching the documented contract.

Changes:

• Extends Curl_conn_get_ssl_info() to accept a cfilter query selector and forwards it to the filter chain.
• Updates getinfo_slist() to request CF_QUERY_SSL_CTX_INFO for CURLINFO_TLS_SESSION and CF_QUERY_SSL_INFO for CURLINFO_TLS_SSL_PTR.
• Documents the new query parameter in lib/cfilters.h.
• Adds regression test 1587 (data file + libtest) that exercises both info values on OpenSSL by calling SSL_CTX_* vs SSL_* APIs on the returned pointer.
• Wires the new test into the tests Makefiles.

Technical Notes: Uses the existing cfilter query() mechanism (CF_QUERY_SSL_INFO/CF_QUERY_SSL_CTX_INFO) to select between per-connection TLS handle vs TLS context when the backend differentiates.

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. 1 suggestion posted.

Comment augment review to trigger a new review at any time.