10000 Skip RSA-PSS ssl test when using LibreSSL. · postgres/postgres@9512970 · GitHub
[go: up one dir, main page]
Skip to content

Commit 9512970

Browse files
tglsfdctglsfdc
committed
Skip RSA-PSS ssl test when using LibreSSL.
Presently, LibreSSL does not have working support for RSA-PSS, so disable that test. Per discussion at https://marc.info/?l=libressl&m=174664225002441&w=2 they do intend to fix this, but it's a ways off yet. Reported-by: Thomas Munro <thomas.munro@gmail.com> Author: Tom Lane <tgl@sss.pgh.pa.us> Reviewed-by: Daniel Gustafsson <daniel@yesql.se> Discussion: https://postgr.es/m/CA+hUKG+fLqyweHqFSBcErueUVT0vDuSNWui-ySz3+d_APmq7dw@mail.gmail.com Backpatch-through: 15
1 parent 75d7333 commit 9512970

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

‎src/test/ssl/t/002_scram.pl

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -44,11 +44,17 @@ sub switch_server_cert
4444
# This is the pattern to use in pg_hba.conf to match incoming connections.
4545
my $SERVERHOSTCIDR = '127.0.0.1/32';
4646

47+
# Determine whether this build uses OpenSSL or LibreSSL.
48+
my $libressl = $ssl_server->is_libressl;
49+
4750
# Determine whether build supports detection of hash algorithms for
4851
# RSA-PSS certificates.
4952
my $supports_rsapss_certs =
5053
check_pg_config("#define HAVE_X509_GET_SIGNATURE_INFO 1");
5154

55+
# As of 5/2025, LibreSSL doesn't actually work for RSA-PSS certificates.
56+
$supports_rsapss_certs = 0 if $libressl;
57+
5258
# Allocation of base connection string shared among multiple tests.
5359
my $common_connstr;
5460

0 commit comments

Comments
 (0)
0