pgsql: pgcrypto: Allow tests to pass in OpenSSL FIPS mode - Mailing list pgsql-committers

From Peter Eisentraut
Subject pgsql: pgcrypto: Allow tests to pass in OpenSSL FIPS mode
Date
Msg-id E1r3zPE-005t9g-MU@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
pgcrypto: Allow tests to pass in OpenSSL FIPS mode

This adds several alternative expected files for when MD5 and 3DES are
not available.  This is similar to the alternative expected files for
when the legacy provider is disabled.  In fact, running the pgcrypto
tests in FIPS mode makes use of some of these existing alternative
expected files as well (e.g., for blowfish).

These new expected files currently cover the FIPS mode provided by
OpenSSL 3.x as well as the modified OpenSSL 3.x from Red Hat (e.g.,
Fedora 38), but not the modified OpenSSL 1.x from Red Hat (e.g.,
Fedora 35).  (The latter will have some error message wording
differences.)

Reviewed-by: Tom Lane <tgl@sss.pgh.pa.us>
Reviewed-by: Daniel Gustafsson <daniel@yesql.se>
Discussion: https://www.postgresql.org/message-id/flat/dbbd927f-ef1f-c9a1-4ec6-c759778ac852%40enterprisedb.com

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/795592865c96b58016a883ac6390c985f140918d

Modified Files
--------------
contrib/pgcrypto/expected/3des_1.out            | 29 ++++++++++++++++
contrib/pgcrypto/expected/crypt-md5_1.out       | 16 +++++++++
contrib/pgcrypto/expected/hmac-md5_1.out        | 44 +++++++++++++++++++++++++
contrib/pgcrypto/expected/md5_1.out             | 17 ++++++++++
contrib/pgcrypto/expected/pgp-encrypt-md5_1.out |  7 ++++
5 files changed, 113 insertions(+)


pgsql-committers by date:

Previous
From: Daniel Gustafsson
Date:
Subject: pgsql: llvmjit: Use explicit LLVMContextRef for inlining
Next
From: Peter Eisentraut
Date:
Subject: pgsql: Allow tests to pass in OpenSSL FIPS mode (TAP tests)