On 6/2/18 16:50, Heikki Linnakangas wrote: > On 08/03/18 14:13, Peter Eisentraut wrote: >> There are two failures in the SSL tests that I cannot explain. The >> tests are for some rather obscure configurations, so the changed >> behaviors are not obviously wrong, perhaps legitimate implementation >> differences. But someone wrote those tests with a purpose (probably), >> so we should have some kind of explanation for the regressions. > > I applied this over commit 4e0c743c18 (because this doesn't compile > against current master, needs rebasing), and ran "make check" in > src/test/ssl. All the tests passed. I'm using GnuTLS version 3.5.8. What > failures did you see?
The patch adjusts the expected test results so that the tests pass. Look for the tests named - "connect with server CA cert, without root CA" - "CRL belonging to a different CA" -- Peter Eisentraut http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services