Re: [HACKERS] GnuTLS support - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: [HACKERS] GnuTLS support
Date
Msg-id a91f16cd-ebc3-9176-3a3a-561c8dc7b3f3@2ndquadrant.com
Whole thread Raw
In response to Re: [HACKERS] GnuTLS support  (Heikki Linnakangas <hlinnaka@iki.fi>)
Responses Re: [HACKERS] GnuTLS support
List pgsql-hackers
On 6/2/18 16:50, Heikki Linnakangas wrote:
> On 08/03/18 14:13, Peter Eisentraut wrote:
>> There are two failures in the SSL tests that I cannot explain.  The
>> tests are for some rather obscure configurations, so the changed
>> behaviors are not obviously wrong, perhaps legitimate implementation
>> differences.  But someone wrote those tests with a purpose (probably),
>> so we should have some kind of explanation for the regressions.
> 
> I applied this over commit 4e0c743c18 (because this doesn't compile 
> against current master, needs rebasing), and ran "make check" in 
> src/test/ssl. All the tests passed. I'm using GnuTLS version 3.5.8. What 
> failures did you see?

The patch adjusts the expected test results so that the tests pass.

Look for the tests named

- "connect with server CA cert, without root CA"
- "CRL belonging to a different CA"

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services


pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: Remove mention in docs that foreign keys on partitioned tables are not supported
Next
From: Peter Eisentraut
Date:
Subject: commitfest 2018-07