Add a regression test suite for SSL support. It's not run by the global "check" or "installcheck" targets, because the temporary installation it creates accepts TCP connections from any user the same host, which is insecure.
Branch ------ master Details ------- http://git.postgresql.org/pg/commitdiff/e39250c644ea7cd3904e4e24570db21a209cf97f Modified Files -------------- src/test/Makefile | 6 + src/test/ssl/Makefile | 126 +++++++++++++ src/test/ssl/README | 83 +++++++++ src/test/ssl/ServerSetup.pm | 96 ++++++++++ src/test/ssl/cas.config | 65 +++++++ src/test/ssl/client.config | 13 ++ src/test/ssl/client_ca.config | 11 ++ src/test/ssl/root_ca.config | 9 + src/test/ssl/server-cn-and-alt-names.config | 25 +++ src/test/ssl/server-cn-only.config | 15 ++ src/test/ssl/server-multiple-alt-names.config | 20 +++ src/test/ssl/server-no-names.config | 17 ++ src/test/ssl/server-revoked.config | 17 ++ src/test/ssl/server-single-alt-name.config | 18 ++ src/test/ssl/server_ca.config | 11 ++ src/test/ssl/ssl/.gitignore | 2 + src/test/ssl/ssl/both-cas-1.crt | 39 +++++ src/test/ssl/ssl/both-cas-2.crt | 39 +++++ src/test/ssl/ssl/client-revoked.crt | 12 ++ src/test/ssl/ssl/client-revoked.key | 15 ++ src/test/ssl/ssl/client.crl | 9 + src/test/ssl/ssl/client.crt | 12 ++ src/test/ssl/ssl/client.key | 15 ++ src/test/ssl/ssl/client_ca.crt | 13 ++ src/test/ssl/ssl/client_ca.key | 15 ++ src/test/ssl/ssl/root+client.crl | 17 ++ src/test/ssl/ssl/root+client_ca.crt | 26 +++ src/test/ssl/ssl/root+server.crl | 17 ++ src/test/ssl/ssl/root+server_ca.crt | 26 +++ src/test/ssl/ssl/root.crl | 8 + src/test/ssl/ssl/root_ca.crt | 13 ++ src/test/ssl/ssl/root_ca.key | 15 ++ src/test/ssl/ssl/server-cn-and-alt-names.crt | 15 ++ src/test/ssl/ssl/server-cn-and-alt-names.key | 15 ++ src/test/ssl/ssl/server-cn-only.crt | 13 ++ src/test/ssl/ssl/server-cn-only.key | 15 ++ src/test/ssl/ssl/server-multiple-alt-names.crt | 15 ++ src/test/ssl/ssl/server-multiple-alt-names.key | 15 ++ src/test/ssl/ssl/server-no-names.crt | 12 ++ src/test/ssl/ssl/server-no-names.key | 15 ++ src/test/ssl/ssl/server-revoked.crt | 13 ++ src/test/ssl/ssl/server-revoked.key | 15 ++ src/test/ssl/ssl/server-single-alt-name.crt | 13 ++ src/test/ssl/ssl/server-single-alt-name.key | 15 ++ src/test/ssl/ssl/server-ss.crt | 13 ++ src/test/ssl/ssl/server-ss.key | 15 ++ src/test/ssl/ssl/server.crl | 9 + src/test/ssl/ssl/server_ca.crt | 13 ++ src/test/ssl/ssl/server_ca.key | 15 ++ src/test/ssl/t/001_ssltests.pl | 223 ++++++++++++++++++++++++ 50 files changed, 1284 insertions(+) -- Sent via pgsql-committers mailing list ([email protected]) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-committers
