Re: SSL tests failing for channel_binding with OpenSSL <= 1.0.1

2019-09-30 Thread Michael Paquier
On Mon, Sep 30, 2019 at 11:08:20AM -0700, Jeff Davis wrote: > On Mon, 2019-09-30 at 09:37 -0400, Tom Lane wrote: >> The committed fix looks odd: isn't the number of executed tests the >> same in both code paths? (I didn't try it yet.) > > test_connect_fails actually runs two tests, one for the fai

Re: SSL tests failing for channel_binding with OpenSSL <= 1.0.1

2019-09-30 Thread Jeff Davis
On Mon, 2019-09-30 at 09:37 -0400, Tom Lane wrote: > Michael Paquier writes: > > On Fri, Sep 27, 2019 at 11:44:57AM +0900, Michael Paquier wrote: > > > We need to do something similar to c3d41cc for the test, as per > > > the > > > attached. I have tested that with OpenSSL 1.0.1 and 1.0.2 to > >

Re: SSL tests failing for channel_binding with OpenSSL <= 1.0.1

2019-09-30 Thread Tom Lane
Michael Paquier writes: > On Fri, Sep 27, 2019 at 11:44:57AM +0900, Michael Paquier wrote: >> We need to do something similar to c3d41cc for the test, as per the >> attached. I have tested that with OpenSSL 1.0.1 and 1.0.2 to stress >> both scenarios. >> Any objections to this fix? > Committed a

Re: SSL tests failing for channel_binding with OpenSSL <= 1.0.1

2019-09-29 Thread Michael Paquier
On Fri, Sep 27, 2019 at 11:44:57AM +0900, Michael Paquier wrote: > We need to do something similar to c3d41cc for the test, as per the > attached. I have tested that with OpenSSL 1.0.1 and 1.0.2 to stress > both scenarios. > > Any objections to this fix? Committed as a12c75a1. -- Michael signa

SSL tests failing for channel_binding with OpenSSL <= 1.0.1

2019-09-26 Thread Michael Paquier
Hi all, (Jeff Davis in CC) As $subject tells, any version of OpenSSL not including X509_get_signature_nid() (version <= 1.0.1) causes the SSL tests to fail. This has been introduced by d6e612f. We need to do something similar to c3d41cc for the test, as per the attached. I have tested that with