postgres.git / summary / log / commit / refs

commit    a282ee68a070a8adc6e6d45e8e643769c587ecc3
Author:   Tom Lane <tgl@sss.pgh.pa.us>
Date:     Wed Apr 07 16:50:17 2021 +0000

    Remove channel binding requirement from clientcert=verify-full test.
    
    This fails on older OpenSSL versions that lack channel binding
    support.  Since that feature is not essential to this test case,
    just remove it, instead of complicating matters.  Per buildfarm.
    
    Jacob Champion
    
    Discussion: https://postgr.es/m/fa8dbbb58c20b1d1adf0082769f80d5466eaf485.camel@vmware.com


 src/test/ssl/t/002_scram.pl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/test/ssl/t/002_scram.pl b/src/test/ssl/t/002_scram.pl
index 3cb22ffced1..194000b523f 100644
--- a/src/test/ssl/t/002_scram.pl
+++ b/src/test/ssl/t/002_scram.pl
@@ -104,8 +104,8 @@ $node->connect_fails(
 
 # Certificate verification at the connection level should still work fine.
 $node->connect_ok(
-	"sslcert=ssl/client.crt sslkey=$client_tmp_key sslrootcert=invalid hostaddr=$SERVERHOSTADDR dbname=verifydb user=ssltestuser channel_binding=require",
-	"SCRAM with clientcert=verify-full and channel_binding=require",
+	"sslcert=ssl/client.crt sslkey=$client_tmp_key sslrootcert=invalid hostaddr=$SERVERHOSTADDR dbname=verifydb user=ssltestuser",
+	"SCRAM with clientcert=verify-full",
 	log_like => [
 		qr/connection authenticated: identity="ssltestuser" method=scram-sha-256/
 	]);


[parent: 0d46771eaaf7]