From 24c6f26e12c1f0915cea7bbfa2c69ba12ada83ba Mon Sep 17 00:00:00 2001 From: Daniel Gustafsson Date: Fri, 13 Feb 2026 23:25:36 +0100 Subject: [PATCH 1/2] Avoid using the X25519 curve in ssl tests The X25519 curve is disallowed when OpenSSL is configured for FIPS mode which makes the testsuite fail. Since X25519 isn't required for the tests we can remove it to allow FIPS enabled configurations to run the tests. Reported-by: Tom Lane Discussion: https://postgr.es/m/3521653.1770666093@sss.pgh.pa.us --- src/test/ssl/t/SSL/Server.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/test/ssl/t/SSL/Server.pm b/src/test/ssl/t/SSL/Server.pm index a023fa6bdee..4c101a26503 100644 --- a/src/test/ssl/t/SSL/Server.pm +++ b/src/test/ssl/t/SSL/Server.pm @@ -324,7 +324,7 @@ sub switch_server_cert $node->append_conf('sslconfig.conf', $backend->set_server_cert(\%params)); # use lists of ECDH curves and cipher suites for syntax testing $node->append_conf('sslconfig.conf', - 'ssl_groups=X25519:prime256v1:secp521r1'); + 'ssl_groups=prime256v1:secp521r1'); $node->append_conf('sslconfig.conf', 'ssl_tls13_ciphers=TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256'); -- 2.39.3 (Apple Git-146)