Re: src/test/ssl broken on HEAD

On 2015-09-02 17:03:46 -0400, Robert Haas wrote:
> On Wed, Sep 2, 2015 at 4:50 PM, Andrew Dunstan <andrew(at)dunslane(dot)net> wrote:
> > Tell me what's needed and I'll look at creating a buildfarm test module for
> > it.
>
> You run the tests via: make -C src/test/ssl check
>
> But nota bene security caveats:
>
> commit e39250c644ea7cd3904e4e24570db21a209cf97f
> Author: Heikki Linnakangas <heikki(dot)linnakangas(at)iki(dot)fi>
> Date: Tue Dec 9 17:21:18 2014 +0200
>
> Add a regression test suite for SSL support.
>
> It's not run by the global "check" or "installcheck" targets, because the
> temporary installation it creates accepts TCP connections from any user
> the same host, which is insecure.

We could just implement SSL over unix sockets. Obviously the
connection-encryption aspect isn't actually useful, but e.g. client
certs still make sense. Besides, it allows to avoid concerns like the
above...

Greetings,

Andres Freund