postgres.git / summary / log / commit / refs

commit    1a01595cc2ffb20ef9f2bc1a92d39728b65e3797
Author:   Michael Paquier <michael@paquier.xyz>
Date:     Tue Aug 04 05:36:09 2020 +0000
First released in: 14.0, 13.0

    Make new SSL TAP test for channel_binding more robust
    
    The test would fail in an environment including a certificate file in
    ~/.postgresql/.  bdd6e9b fixed a similar failure, and d6e612f introduced
    the same problem again with a new test.
    
    Author: Kyotaro Horiguchi
    Discussion: https://postgr.es/m/20200804.120033.31225582282178001.horikyota.ntt@gmail.com
    Backpatch-through: 13


 src/test/ssl/t/002_scram.pl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/test/ssl/t/002_scram.pl b/src/test/ssl/t/002_scram.pl
index a1ab9119880..1cdbc50dd3c 100644
--- a/src/test/ssl/t/002_scram.pl
+++ b/src/test/ssl/t/002_scram.pl
@@ -97,7 +97,7 @@ my $client_tmp_key = "ssl/client_scram_tmp.key";
 copy("ssl/client.key", $client_tmp_key);
 chmod 0600, $client_tmp_key;
 test_connect_fails(
-	"sslcert=ssl/client.crt sslkey=$client_tmp_key hostaddr=$SERVERHOSTADDR",
+	"sslcert=ssl/client.crt sslkey=$client_tmp_key sslrootcert=invalid hostaddr=$SERVERHOSTADDR",
 	"dbname=certdb user=ssltestuser channel_binding=require",
 	qr/channel binding required, but server authenticated client without channel binding/,
 	"Cert authentication and channel_binding=require");


[parent: e7a6cd5dcf24]