Add WOLFSSL_KEY_GEN guard for RSA test and balance wolfSSL_Init refcount in serial-0 tests

Author: jackctj117

tests/api.c

@@ -21391,7 +21391,7 @@ static int test_MakeCertWith0Ser(void)
     EXPECT_DECLS;
 #if defined(WOLFSSL_CERT_REQ) && !defined(NO_ASN_TIME) && \
     defined(WOLFSSL_CERT_GEN) && !defined(NO_RSA) && \
-    defined(WOLFSSL_ASN_TEMPLATE)
+    defined(WOLFSSL_KEY_GEN) && defined(WOLFSSL_ASN_TEMPLATE)
     Cert cert;
     DecodedCert decodedCert;
     byte der[FOURK_BUF];

tests/api/test_asn.c

@@ -1073,6 +1073,9 @@ int test_SerialNumber0_RootCA(void)
         wolfSSL_CertManagerFree(cm);
         cm = NULL;
     }
+    /* Balance the wolfSSL_Init refcount incremented by internal
+     * wolfSSL_CTX_new_ex calls in CertManagerLoadCA/Verify. */
+    wolfSSL_Cleanup();
 
     /* Test 4: Self-signed non-CA certificate with serial 0 should be rejected */
     ExpectNotNull(cm = wolfSSL_CertManagerNew());
@@ -1083,6 +1086,7 @@ int test_SerialNumber0_RootCA(void)
         wolfSSL_CertManagerFree(cm);
         cm = NULL;
     }
+    wolfSSL_Cleanup();
 #endif /* !WOLFSSL_NO_ASN_STRICT && !WOLFSSL_PYTHON &&
           !WOLFSSL_ASN_ALLOW_0_SERIAL &&
           !WOLFSSL_TEST_APPLE_NATIVE_CERT_VALIDATION */