sharpetronics/PostgreSQL
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-05-10 00:02:30 -04:00
Code Issues Projects Releases Wiki Activity

Skip RSA-PSS ssl test when using LibreSSL.

Browse Source 
Presently, LibreSSL does not have working support for RSA-PSS,
so disable that test.  Per discussion at
https://marc.info/?l=libressl&m=174664225002441&w=2
they do intend to fix this, but it's a ways off yet.

Reported-by: Thomas Munro <thomas.munro@gmail.com>
Author: Tom Lane <tgl@sss.pgh.pa.us>
Reviewed-by: Daniel Gustafsson <daniel@yesql.se>
Discussion: https://postgr.es/m/CA+hUKG+fLqyweHqFSBcErueUVT0vDuSNWui-ySz3+d_APmq7dw@mail.gmail.com
Backpatch-through: 15
This commit is contained in:
Tom Lane 2025-05-09 12:29:01 -04:00
parent 27fbf7cb63
commit cad781b3e5
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/test/ssl/t/002_scram.pl
View File

@ -44,14 +44,21 @@ my $SERVERHOSTADDR = '127.0.0.1';
# This is the pattern to use in pg_hba.conf to match incoming connections.
my $SERVERHOSTCIDR = '127.0.0.1/32';
# Determine whether this build uses OpenSSL or LibreSSL.
my $libressl = $ssl_server->is_libressl;
# Determine whether build supports tls-server-end-point.
my $supports_tls_server_end_point =
check_pg_config("#define HAVE_X509_GET_SIGNATURE_NID 1");
# Determine whether build supports detection of hash algorithms for
# RSA-PSS certificates.
my $supports_rsapss_certs =
check_pg_config("#define HAVE_X509_GET_SIGNATURE_INFO 1");
# As of 5/2025, LibreSSL doesn't actually work for RSA-PSS certificates.
$supports_rsapss_certs = 0 if $libressl;
# Allocation of base connection string shared among multiple tests.
my $common_connstr;