Content-Type: multipart/alternative;
 boundary="------------R5AW2eRDGR0pswKr4QIlfEkG"
Message-ID: <c2474e21-4528-4042-9b98-d88ab21f7efa@dunslane.net>
Date: Thu, 4 Apr 2024 05:43:34 -0400
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
From: Andrew Dunstan <andrew@dunslane.net>
To: buildfarm-members@postgresql.org
Subject: SSL tests
Autocrypt: addr=andrew@dunslane.net; keydata=
 xsBNBE7KWFkBCAClridxur2AIc7eW2AR7izbfp3EnNefie2HbLF0izW5Ik5UjX2HBXBx4syI
 gY6b0ugohXrr274+baoAlvSbq6cAoQuEVrk5IZFzt20b1Xkx65FwGSEj526yiKLocqkJceSq
 Xr9xcA5SGY+FZv441chh5SU92v4q6z+6LPpoHOh97ptAVXZYNTtU0LevyvD5lja0TzbvJm6C
 eFXitJfnm1pLEr0DGJCR/iUOl/N62Kh4855zZC7NHIjQHPOvV5Stz/l5ilDhvGVk+xkXFPys
 SjZoUr1rXhYLpiyi5sR0X9FHXT0KnGuz1F5ERO7ZTLSSQ6fJwPj6gOk9K+vvoKvoeql5ABEB
 AAHNJEFuZHJldyBEdW5zdGFuIDxhbmRyZXdAZHVuc2xhbmUubmV0PsLAmwQTAQgARQIbAwIX
 gAIZAQULCQgHAgMiAgEGFQoJCAsCBBYCAwECHgcWIQTkPlhGHfx8v0RpFaWZ+n/LWfw7gQUC
 ZFlxxwUJGVGAbgAKCRCZ+n/LWfw7gXikB/9ZdcUy6CTBFIIuL/bVsc1eLEW/gJBjJBF6HxNY
 xgEkAgXAp4Lg4A5U+QB9GouFr7+GYxF0BU4hzoGhNPUWltxnHdMWP8nC/38LAqgMi8L/bbsm
 HW5YPBdWYaAZAPJQVfOAgjTbRUb26KSprpyrrJKW0ZmrZfjhNPcQ72jpWzoPLQqx2X6B0fru
 1jq+cBh8lb6r1mJTim1T3JIn+F/v5VpdQS+EL8xqsHkfzKjIPsW3CIXpkypSk6saA55Rkkbl
 26AW8ftPVB0Q6Lnn6FLt9CP0MGNixBQ55yq8r1K+nCBvCCjvQjM8RDm0UUum0WNl+ifQgTLO
 E8TWEnwVtkBf+3QWzsBNBE7KWFkBCADRnOM0FCzsYW6jtncg+dWIagjUZpvaClmqn/sJluLa
 Q3v1VXMQJzYs3eC1gh386W+XBwLRpDj3jzH81lX+p73Re3d3oJW7X+ffsxuzu5ZVdMUkqBYo
 nkAbKxr6gyJ12F/+JkUVzLcoTN+d/7YsQvUVi7NaKH8mJgjz112O4fUe3p9wfAaFa0RXHc5S
 GPzRTYRRlv/XZBIho4J2tkZOnteZJZ+GbxQVlINt6fd8P6al3MWOvpP/ExJPguEfjOsO6Njy
 xjo3WfpD4lHMOR/Oc3/8mScEF84rF2jXbsFgelWnbPWAvXY+pD0dXOFRkagGmC/viwBDqq5b
 5tk76kKmUbZxABEBAAHCwHwEGAEIACYCGwwWIQTkPlhGHfx8v0RpFaWZ+n/LWfw7gQUCZFlx
 5wUJGVGAjgAKCRCZ+n/LWfw7gf+iB/4g8CPY5jihf5r/8EsoIGe2H+dpVmpPF8YGBzTIvCz/
 fQoOq8AX/pE76QEuFnFZWfjw+wgBXgCVmkox2Eflkk6z4ND3pcwGZ6CfCxTQCDk/dij+2DQ4
 6bmDCy/sBgcbz9mTpoLC11HLoPae6YN9nBNQRZDcEFEu54OaVOqlIdbA6m+POIBCXZdHOFc0
 WoDTgxHRzC1jgQNidyd6tKqcsVJs0dzF0oKTmFFmUAqTdJO12LBuNA1rlqrR3EtpYk8B/wtS
 5dIMD7Q8hwQpL+4C6GNpb6ZKnPkLi47pDOLhz2qBrqN+rqUEsT3YnExYpzj5yOBi+FlmV1Hw
 49QYe1sn2ZPs
Cc: Daniel Gustafsson <daniel@yesql.se>
Archived-At: 
 <https://www.postgresql.org/message-id/c2474e21-4528-4042-9b98-d88ab21f7efa%40dunslane.net>
Precedence: bulk

This is a multi-part message in MIME format.
--------------R5AW2eRDGR0pswKr4QIlfEkG
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit


Hi Buildfarm owners,

It's been noted on the -hackers mailing list than most buildfarm animals 
are not performing SSL tests even if they are building with SSL. That's 
a sad gap in our test coverage.

The sample configuration file has this in the build_env section

    # run extra TAP tests if listed here # These are the ones omitted
    without the setting # on a secure single user system it makes sense
    to enable these # PG_TEST_EXTRA => "ssl ldap kerberos",

In general, unless your animal is running on a multi-user system, 
enabling these tests should be safe, which you could do by uncommenting 
the last line above or inserting it into your config file if not present.

Please consider doing so for your animal(s), as we'd like to get 
increased coverage of all these tests, but especially of the SSL tests.


cheers


andrew

--
Andrew Dunstan
EDB:https://www.enterprisedb.com

--------------R5AW2eRDGR0pswKr4QIlfEkG
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<!DOCTYPE html>
<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p><br>
    </p>
    <p><font face="monospace">Hi Buildfarm owners,<br>
      </font></p>
    <p><font face="monospace">It's been noted on the -hackers mailing
        list than most buildfarm animals are not performing SSL tests
        even if they are building with SSL. That's a sad gap in our test
        coverage.</font></p>
    <p><font face="monospace">The sample configuration file has this in
        the build_env section</font></p>
    <blockquote>
      <pre><font face="monospace">  # run extra TAP tests if listed here
  # These are the ones omitted without the setting
  # on a secure single user system it makes sense to enable these
  # PG_TEST_EXTRA =&gt; "ssl ldap kerberos",

</font></pre>
    </blockquote>
    <p><font face="monospace">In general, unless your animal is running
        on a multi-user system, enabling these tests should be safe,
        which you could do by uncommenting the last line above or
        inserting it into your config file if not present.</font></p>
    <p><font face="monospace">Please consider doing so for your
        animal(s), as we'd like to get increased coverage of all these
        tests, but especially of the SSL tests.</font></p>
    <p><font face="monospace"><br>
      </font></p>
    <p><font face="monospace">cheers</font></p>
    <p><font face="monospace"><br>
      </font></p>
    <p><font face="monospace">andrew<br>
      </font></p>
    <pre class="moz-signature"
    signature-switch-id="d0437855-2267-4610-80b3-83167ec45b0b" cols="72">--
Andrew Dunstan
EDB: <a class="moz-txt-link-freetext" href="https://www.enterprisedb.com">https://www.enterprisedb.com</a>
</pre>
  </body>
</html>

--------------R5AW2eRDGR0pswKr4QIlfEkG--