Re: [HACKERS] GnuTLS support

On 6/2/18 16:50, Heikki Linnakangas wrote:
> On 08/03/18 14:13, Peter Eisentraut wrote:
>> There are two failures in the SSL tests that I cannot explain.  The
>> tests are for some rather obscure configurations, so the changed
>> behaviors are not obviously wrong, perhaps legitimate implementation
>> differences.  But someone wrote those tests with a purpose (probably),
>> so we should have some kind of explanation for the regressions.
> 
> I applied this over commit 4e0c743c18 (because this doesn't compile 
> against current master, needs rebasing), and ran "make check" in 
> src/test/ssl. All the tests passed. I'm using GnuTLS version 3.5.8. What 
> failures did you see?

The patch adjusts the expected test results so that the tests pass.

Look for the tests named

- "connect with server CA cert, without root CA"
- "CRL belonging to a different CA"

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services