Commit793aa98

committed

Skip RSA-PSS ssl test when using LibreSSL.

Presently, LibreSSL does not have working support for RSA-PSS,so disable that test. Per discussion athttps://marc.info/?l=libressl&m=174664225002441&w=2they do intend to fix this, but it's a ways off yet.Reported-by: Thomas Munro <thomas.munro@gmail.com>Author: Tom Lane <tgl@sss.pgh.pa.us>Reviewed-by: Daniel Gustafsson <daniel@yesql.se>Discussion:https://postgr.es/m/CA+hUKG+fLqyweHqFSBcErueUVT0vDuSNWui-ySz3+d_APmq7dw@mail.gmail.comBackpatch-through: 15

1 parent00811a9 commit793aa98Copy full SHA for 793aa98

File tree

-0

lines changed

-0

lines changed

Lines changed: 7 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -39,14 +39,21 @@ sub switch_server_cert`
`39`	`39`	`# This is the pattern to use in pg_hba.conf to match incoming connections.`
`40`	`40`	`my$SERVERHOSTCIDR ='127.0.0.1/32';`
`41`	`41`
	`42`	`+# Determine whether this build uses OpenSSL or LibreSSL.`
	`43`	`+my$libressl =$ssl_server->is_libressl;`
	`44`	`+`
`42`	`45`	`# Determine whether build supports tls-server-end-point.`
`43`	`46`	`my$supports_tls_server_end_point =`
`44`	`47`	`check_pg_config("#define HAVE_X509_GET_SIGNATURE_NID 1");`
	`48`	`+`
`45`	`49`	`# Determine whether build supports detection of hash algorithms for`
`46`	`50`	`# RSA-PSS certificates.`
`47`	`51`	`my$supports_rsapss_certs =`
`48`	`52`	`check_pg_config("#define HAVE_X509_GET_SIGNATURE_INFO 1");`
`49`	`53`
	`54`	`+# As of 5/2025, LibreSSL doesn't actually work for RSA-PSS certificates.`
	`55`	`+$supports_rsapss_certs = 0if$libressl;`
	`56`	`+`
`50`	`57`	`# Allocation of base connection string shared among multiple tests.`
`51`	`58`	`my$common_connstr;`
`52`	`59`

Comments

(0)