git.postgresql.org Git - postgresql.git/commitdiff

git projects / postgresql.git / commitdiff

Remove channel binding requirement from clientcert=verify-full test.

Wed, 7 Apr 2021 16:50:17 +0000 (12:50 -0400)

This fails on older OpenSSL versions that lack channel binding
support. Since that feature is not essential to this test case,
just remove it, instead of complicating matters. Per buildfarm.

Jacob Champion

Discussion: https://postgr.es/m/fa8dbbb58c20b1d1adf0082769f80d5466eaf485.camel@vmware.com

src/test/ssl/t/002_scram.pl patch | blob | blame | history

diff --git a/src/test/ssl/t/002_scram.pl b/src/test/ssl/t/002_scram.pl

index 3cb22ffced1ef17b59a8e2722a0739a5870b17e3..194000b523f50b9370c16a7dea9713898047e184 100644 (file)

--- a/src/test/ssl/t/002_scram.pl

+++ b/src/test/ssl/t/002_scram.pl

@@ -104,8 +104,8 @@ $node->connect_fails(

# Certificate verification at the connection level should still work fine.

$node->connect_ok(

- "sslcert=ssl/client.crt sslkey=$client_tmp_key sslrootcert=invalid hostaddr=$SERVERHOSTADDR dbname=verifydb user=ssltestuser channel_binding=require",

- "SCRAM with clientcert=verify-full and channel_binding=require",

+ "sslcert=ssl/client.crt sslkey=$client_tmp_key sslrootcert=invalid hostaddr=$SERVERHOSTADDR dbname=verifydb user=ssltestuser",

+ "SCRAM with clientcert=verify-full",

log_like => [

qr/connection authenticated: identity="ssltestuser" method=scram-sha-256/

]);

This is the main PostgreSQL git repository.

RSS Atom