Fix serial-0 test: add Apple native cert guard, fix memory leak, assert specific error code

Author: jackctj117

tests/api/test_asn.c

@@ -926,7 +926,8 @@ int test_SerialNumber0_RootCA(void)
     EXPECT_DECLS;
 
 #if !defined(NO_CERTS) && !defined(NO_FILESYSTEM) && !defined(NO_RSA) && \
-    !defined(WOLFSSL_NO_PEM) && defined(WOLFSSL_PEM_TO_DER)
+    !defined(WOLFSSL_NO_PEM) && defined(WOLFSSL_PEM_TO_DER) && \
+    !defined(WOLFSSL_TEST_APPLE_NATIVE_CERT_VALIDATION)
     /* Test that root CA certificates with serial number 0 are accepted,
      * while non-root certificates with serial 0 are rejected (issue #8615) */
 
@@ -983,10 +984,15 @@ int test_SerialNumber0_RootCA(void)
     }
 #endif
 
+    if (cm != NULL) {
+        wolfSSL_CertManagerFree(cm);
+        cm = NULL;
+    }
+
     /* Test 5: Self-signed non-CA certificate with serial 0 should be rejected */
     ExpectNotNull(cm = wolfSSL_CertManagerNew());
-    ExpectIntNE(wolfSSL_CertManagerLoadCA(cm, selfSignedNonCASerial0File, NULL),
-                WOLFSSL_SUCCESS);
+    ExpectIntEQ(wolfSSL_CertManagerLoadCA(cm, selfSignedNonCASerial0File, NULL),
+                WC_NO_ERR_TRACE(ASN_PARSE_E));
 
     if (cm != NULL) {
         wolfSSL_CertManagerFree(cm);