From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
To: Kyotaro HORIGUCHI <horiguchi.kyotaro@lab.ntt.co.jp>
Cc: LouPicciano@comcast.net
Cc: tgl@sss.pgh.pa.us
Cc: bruce@momjian.us
Cc: pgsql-hackers@postgresql.org
Subject: Re: pg_stat_ssl additions
Date: Mon, 28 Jan 2019 14:53:43 +0100
Message-ID: <24783370-5acd-e0f3-8eb7-7f42ff2a026d@2ndquadrant.com> (raw)
In-Reply-To: <20190128.171400.111796002.horiguchi.kyotaro@lab.ntt.co.jp>
References: <d80f6c25-643f-a9b8-787e-3b05e2c13911@2ndquadrant.com>
<1b84688b-92c0-27fb-eba5-975ab2c45574@2ndquadrant.com>
<3f8a7a73-cebe-016f-49e3-853733f8baf2@2ndquadrant.com>
<20190128.171400.111796002.horiguchi.kyotaro@lab.ntt.co.jp>
On 28/01/2019 09:14, Kyotaro HORIGUCHI wrote:
> 0002:
>
> The test 54-56 of 001_ssltest.pl failed, which succeeded before
> applying 0002. Seems to need to use another user.
>
> # Failed test 'pg_stat_ssl view without client certificate: no stderr'
> # at t/001_ssltests.pl line 313.
> # got: 'psql: SSL error: certificate verify failed
> # FATAL: no pg_hba.conf entry for host "127.0.0.1", user "ssltestuser", database "trustdb", SSL off
> # '
>
> If this is not specific to my environment, the connevcion string
> at line 313 of 001_ssltests.pl needs sslrootcert setting (, which
> is feeded to test_connect_ok/fails() via $connstr, not via
> $common_connstr).
This is strange. The tests work for me, and also on the cfbot. The
pg_hba.conf method is "trust", and there is nothing that should make it
do certificate verification for this test. Do you have have any PGSSL*
environment variables set perhaps? An interesting OpenSSL version or
configuration perhaps?
--
Peter Eisentraut http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: peter.eisentraut@2ndquadrant.com, horiguchi.kyotaro@lab.ntt.co.jp, LouPicciano@comcast.net, tgl@sss.pgh.pa.us, bruce@momjian.us
Subject: Re: pg_stat_ssl additions
In-Reply-To: <24783370-5acd-e0f3-8eb7-7f42ff2a026d@2ndquadrant.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox