pg.ddx.io pgsql-hackers@postgresql.org mailing list archive help / color / mirror / Atom feed From: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
To: Jacob Champion <jchampion@timescale.com>
To: Daniel Gustafsson <daniel@yesql.se>
Cc: Gregory Stark (as CFM) <stark.cfm@gmail.com>
Cc: PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Cc: Magnus Hagander <magnus@hagander.net>
Cc: Michael Paquier <michael@paquier.xyz>
Cc: thomas@habets.se, Tom Lane <tgl@sss.pgh.pa.us>
Cc: Bruce Momjian <bruce@momjian.us>
Cc: Andrew Dunstan <andrew@dunslane.net>
Cc: Jelte Fennema <postgres@jeltef.nl>
Subject: Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert
Date: Wed, 12 Apr 2023 09:11:41 +0200
Message-ID: <c39be3c5-c1a5-1e33-1024-16f527e251a4@enterprisedb.com> (raw )
In-Reply-To: <CAAWbhmi=jOgFimgEdDPQs0xHHxDg=Z82EK6yfjPZzqrxEj4uDg@mail.gmail.com >
References: <CAAWbhminr7ArSkKh=FeRMajRf43J0Q-VOG=vE-STCCgi7EAg=Q@mail.gmail.com >
<CABUevExicKho6VR9yzkK4OHducVC4TucvscLdwPN3f30uAvqbQ@mail.gmail.com >
<CAGECzQSNy8pAkvoVQ8vHpCoS67jqWkJ2B2G+cK+5j0E75zo3cw@mail.gmail.com >
<CAAWbhmg5UKhaUgfJyGjqLK07xGgS8y03J9sKOZFvMEa-yG0irA@mail.gmail.com >
<4157021b-907f-0274-6d76-060cb669a889@timescale.com >
<CAM-w4HPZHOqkZCNukEfsD973opVS8oQS5L+4uUp1ry2+LMvEWA@mail.gmail.com >
<CAAWbhmjYgit4J7+aNXgtOVQ5Ur9fZi7WJzEqdWF4isTBnuHBzQ@mail.gmail.com >
<973A719C-A950-4748-BE0A-AC876E250E63@yesql.se >
<8819ba23-3111-777b-0479-50c18cbb8a5f@timescale.com >
<E892023D-6B6B-4498-B6FC-7C75C55BA81C@yesql.se >
<CAAWbhmhUV+84fMOy7GRebyy-1ZEcT_9F5M2Tc_XjOARFbZjEWQ@mail.gmail.com >
<827B36A4-06CA-43FB-BC54-1BC858FB6474@yesql.se >
<CAAWbhmjbf=ZpcMO33-TYxxN=3WNJkN11D+TRmMsK7XJ3Lmdy7g@mail.gmail.com >
<B6B12C57-17E7-42E4-AD48-0FA1B28C538B@yesql.se >
<CAAWbhmi=jOgFimgEdDPQs0xHHxDg=Z82EK6yfjPZzqrxEj4uDg@mail.gmail.com >
On 05.04.23 23:29, Jacob Champion wrote:
> On Wed, Apr 5, 2023 at 2:27 PM Daniel Gustafsson <daniel@yesql.se> wrote:
>> I squashed and pushed v10 with a few small comment tweaks for typos and some
>> pgindenting. Thanks!
>
> Thank you very much!
This patch (8eda731465) makes the ssl tests fail for me:
not ok 121 - sslrootcert=system does not connect with private CA: matches
# Failed test 'sslrootcert=system does not connect with private CA:
matches'
# at t/001_ssltests.pl line 479.
# 'psql: error: connection to server at "127.0.0.1",
port 53971 failed: SSL SYSCALL error: Undefined error: 0'
# doesn't match '(?^:SSL error: certificate verify failed)'
This is with OpenSSL 3.1.0 from macOS/Homebrew.
If I instead use OpenSSL 1.1.1t, then the tests pass.
view thread (99+ messages) latest in thread
Message-ID: <c39be3c5-c1a5-1e33-1024-16f527e251a4@enterprisedb.com>
Permalink: ../c39be3c5-c1a5-1e33-1024-16f527e251a4@enterprisedb.com/
Also on: postgresql.org/message-id/c39be3c5-c1a5-1e33-1024-16f527e251a4@enterprisedb.com
copy link · copy postgr.es
reply Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: peter.eisentraut@enterprisedb.com, jchampion@timescale.com, daniel@yesql.se, stark.cfm@gmail.com, magnus@hagander.net, michael@paquier.xyz, tgl@sss.pgh.pa.us, bruce@momjian.us, andrew@dunslane.net, postgres@jeltef.nl
Subject: Re: [PATCH] Add `verify-system` sslmode to use system CA pool for server cert
In-Reply-To: <c39be3c5-c1a5-1e33-1024-16f527e251a4@enterprisedb.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox