Re: Allow tests to pass in OpenSSL FIPS mode

Поиск
Список
Период
Сортировка
От Michael Paquier
Тема Re: Allow tests to pass in OpenSSL FIPS mode
Дата
Msg-id Y0YV+lQNQFRIdvGJ@paquier.xyz
обсуждение исходный текст
Ответ на Re: Allow tests to pass in OpenSSL FIPS mode  (Peter Eisentraut <peter.eisentraut@enterprisedb.com>)
Ответы Re: Allow tests to pass in OpenSSL FIPS mode  (Peter Eisentraut <peter.eisentraut@enterprisedb.com>)
Список pgsql-hackers
On Tue, Oct 11, 2022 at 01:51:50PM +0200, Peter Eisentraut wrote:
> Let's make a small start on this.  The attached patch moves the tests of the
> md5() function to a separate test file.  That would ultimately make it
> easier to maintain a variant expected file for FIPS mode where that function
> will fail (similar to how we have done it for the pgcrypto tests).

Makes sense to me.  This slice looks fine.

I think that the other md5() computations done in the main regression
test suite could just be switched to use one of the sha*() functions
as they just want to put their hands on text values.  It looks like a
few of them have some expections with the output size and
generate_series(), though, but this could be tweaked by making the
series shorter, for example.
--
Michael

Вложения

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Michael Paquier
Дата:
Сообщение: Re: Make finding openssl program a configure or meson option
Следующее
От: "osumi.takamichi@fujitsu.com"
Дата:
Сообщение: RE: Allow logical replication to copy tables in binary format