Commit9512970

committed

Skip RSA-PSS ssl test when using LibreSSL.

Presently, LibreSSL does not have working support for RSA-PSS,so disable that test. Per discussion athttps://marc.info/?l=libressl&m=174664225002441&w=2they do intend to fix this, but it's a ways off yet.Reported-by: Thomas Munro <thomas.munro@gmail.com>Author: Tom Lane <tgl@sss.pgh.pa.us>Reviewed-by: Daniel Gustafsson <daniel@yesql.se>Discussion:https://postgr.es/m/CA+hUKG+fLqyweHqFSBcErueUVT0vDuSNWui-ySz3+d_APmq7dw@mail.gmail.comBackpatch-through: 15

1 parent75d7333 commit9512970Copy full SHA for 9512970

File tree

-0

lines changed

-0

lines changed

Lines changed: 6 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -44,11 +44,17 @@ sub switch_server_cert`
`44`	`44`	`# This is the pattern to use in pg_hba.conf to match incoming connections.`
`45`	`45`	`my$SERVERHOSTCIDR ='127.0.0.1/32';`
`46`	`46`
	`47`	`+# Determine whether this build uses OpenSSL or LibreSSL.`
	`48`	`+my$libressl =$ssl_server->is_libressl;`
	`49`	`+`
`47`	`50`	`# Determine whether build supports detection of hash algorithms for`
`48`	`51`	`# RSA-PSS certificates.`
`49`	`52`	`my$supports_rsapss_certs =`
`50`	`53`	`check_pg_config("#define HAVE_X509_GET_SIGNATURE_INFO 1");`
`51`	`54`
	`55`	`+# As of 5/2025, LibreSSL doesn't actually work for RSA-PSS certificates.`
	`56`	`+$supports_rsapss_certs = 0if$libressl;`
	`57`	`+`
`52`	`58`	`# Allocation of base connection string shared among multiple tests.`
`53`	`59`	`my$common_connstr;`
`54`	`60`

Comments

(0)