On 2015-09-02 17:03:46 -0400, Robert Haas wrote: > On Wed, Sep 2, 2015 at 4:50 PM, Andrew Dunstan <and...@dunslane.net> wrote: > > Tell me what's needed and I'll look at creating a buildfarm test module for > > it. > > You run the tests via: make -C src/test/ssl check > > But nota bene security caveats: > > commit e39250c644ea7cd3904e4e24570db21a209cf97f > Author: Heikki Linnakangas <heikki.linnakan...@iki.fi> > Date: Tue Dec 9 17:21:18 2014 +0200 > > Add a regression test suite for SSL support. > > It's not run by the global "check" or "installcheck" targets, because the > temporary installation it creates accepts TCP connections from any user > the same host, which is insecure.
We could just implement SSL over unix sockets. Obviously the connection-encryption aspect isn't actually useful, but e.g. client certs still make sense. Besides, it allows to avoid concerns like the above... Greetings, Andres Freund -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers