Commitcad781b

committed

Skip RSA-PSS ssl test when using LibreSSL.

Presently, LibreSSL does not have working support for RSA-PSS,so disable that test. Per discussion athttps://marc.info/?l=libressl&m=174664225002441&w=2they do intend to fix this, but it's a ways off yet.Reported-by: Thomas Munro <thomas.munro@gmail.com>Author: Tom Lane <tgl@sss.pgh.pa.us>Reviewed-by: Daniel Gustafsson <daniel@yesql.se>Discussion:https://postgr.es/m/CA+hUKG+fLqyweHqFSBcErueUVT0vDuSNWui-ySz3+d_APmq7dw@mail.gmail.comBackpatch-through: 15

1 parent27fbf7c commitcad781bCopy full SHA for cad781b

File tree

-0

lines changed

-0

lines changed

Lines changed: 7 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -44,14 +44,21 @@ sub switch_server_cert`
`44`	`44`	`# This is the pattern to use in pg_hba.conf to match incoming connections.`
`45`	`45`	`my$SERVERHOSTCIDR ='127.0.0.1/32';`
`46`	`46`
	`47`	`+# Determine whether this build uses OpenSSL or LibreSSL.`
	`48`	`+my$libressl =$ssl_server->is_libressl;`
	`49`	`+`
`47`	`50`	`# Determine whether build supports tls-server-end-point.`
`48`	`51`	`my$supports_tls_server_end_point =`
`49`	`52`	`check_pg_config("#define HAVE_X509_GET_SIGNATURE_NID 1");`
	`53`	`+`
`50`	`54`	`# Determine whether build supports detection of hash algorithms for`
`51`	`55`	`# RSA-PSS certificates.`
`52`	`56`	`my$supports_rsapss_certs =`
`53`	`57`	`check_pg_config("#define HAVE_X509_GET_SIGNATURE_INFO 1");`
`54`	`58`
	`59`	`+# As of 5/2025, LibreSSL doesn't actually work for RSA-PSS certificates.`
	`60`	`+$supports_rsapss_certs = 0if$libressl;`
	`61`	`+`
`55`	`62`	`# Allocation of base connection string shared among multiple tests.`
`56`	`63`	`my$common_connstr;`
`57`	`64`

Comments

(0)