On Fri, Jan 5, 2018 at 10:47 PM, Robert Haas <robertmh...@gmail.com> wrote: > The SSL tests on chipmunk failed in the last run. I assume that's > probably the fault of this patch, or one of the follow-on commits:
Thanks for the heads-up, Robert. I did not notice the failure. That's the fault of 054e8c6c. Raspbian is using OpenSSL 1.0.1t (package list can be downloaded in http://archive.raspbian.org/raspbian/dists/wheezy/main/binary-armhf/Packages for 38MB), which does not have the necessary facilities to implement tls-server-end-point as upstream has added necessary APIs only in 1.0.2. In order to do things cleanly, we should make this TAP test conditional on the version of OpenSSL. There have been discussions in the past to make a module dedicated to that, but no clear patch or approach has showed up. This can be retrieved with SSLeay_version() or "openssl version", but that seems not fun nor stable to rely on openssl to be in PATH. I don't see disabling this test helping either, but we could consider that without an appropriate module to track dependencies in a build with its versions. I would be personally fine with having an environment variable switch I could use to enable the test as well as I use already a script to run all regression tests in the tree (src/test/ssl is not run by default as it is unsecure for shared environments, without counting on meltdowns). Thoughts from others? -- Michael