Re: Support for NSS as a libpq TLS backend

From: Julien Rouhaud <rjuju123(at)gmail(dot)com>
To: Daniel Gustafsson <daniel(at)yesql(dot)se>
Cc: Jacob Champion <pchampion(at)vmware(dot)com>, "pgsql-hackers(at)lists(dot)postgresql(dot)org" <pgsql-hackers(at)lists(dot)postgresql(dot)org>, "hlinnaka(at)iki(dot)fi" <hlinnaka(at)iki(dot)fi>, "andrew(dot)dunstan(at)2ndquadrant(dot)com" <andrew(dot)dunstan(at)2ndquadrant(dot)com>, "michael(at)paquier(dot)xyz" <michael(at)paquier(dot)xyz>, "thomas(dot)munro(at)gmail(dot)com" <thomas(dot)munro(at)gmail(dot)com>, "andres(at)anarazel(dot)de" <andres(at)anarazel(dot)de>, "sfrost(at)snowman(dot)net" <sfrost(at)snowman(dot)net>
Subject: Re: Support for NSS as a libpq TLS backend
Date: 2022-01-18 06:36:32
Message-ID: 20220118063632.zlmp4texruuhwyq4@jrouhaud
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Hi,

On Mon, Jan 17, 2022 at 03:09:11PM +0100, Daniel Gustafsson wrote:
>
> I must've fat-fingered the "git add -p" for v50 as the fix was in configure.ac
> but not configure. Fixed now.

Thanks! Apparently this version now fails on all OS, e.g.:

https://cirrus-ci.com/task/4643868095283200
[22:17:39.965] # Failed test 'certificate authorization succeeds with correct client cert in PEM format'
[22:17:39.965] # at t/001_ssltests.pl line 456.
[22:17:39.965] # got: '2'
[22:17:39.965] # expected: '0'
[22:17:39.965]
[22:17:39.965] # Failed test 'certificate authorization succeeds with correct client cert in PEM format: no stderr'
[22:17:39.965] # at t/001_ssltests.pl line 456.
[22:17:39.965] # got: 'psql: error: connection to server at "127.0.0.1", port 50023 failed: certificate present, but not private key file "/home/postgres/.postgresql/postgresql.key"'
[22:17:39.965] # expected: ''
[22:17:39.965]
[22:17:39.965] # Failed test 'certificate authorization succeeds with correct client cert in DER format'
[22:17:39.965] # at t/001_ssltests.pl line 475.
[22:17:39.965] # got: '2'
[22:17:39.965] # expected: '0'
[...]

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Julien Rouhaud 2022-01-18 06:45:39 Re: Use generation context to speed up tuplesorts
Previous Message Julien Rouhaud 2022-01-18 06:33:14 Re: SQL/JSON: functions