Re: MSVC SSL test failure

Daniel Gustafsson <daniel@yesql.se>

From: Daniel Gustafsson <daniel@yesql.se>
To: Andrew Dunstan <andrew@dunslane.net>
Cc: PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Date: 2021-12-05T20:14:48Z
Lists: pgsql-hackers
> On 5 Dec 2021, at 18:03, Andrew Dunstan <andrew@dunslane.net> wrote:

> I am getting this test failure 001_ssltests.pl on my test MSVC system
> when SSL tests are enabled:
> 
>    not ok 110 - certificate authorization fails with revoked client cert with server-side CRL directory: matches
> 
>    #   Failed test 'certificate authorization fails with revoked client cert with server-side CRL directory: matches'
>    #   at t/001_ssltests.pl line 618.
>    #                   'psql: error: connection to server at "127.0.0.1", port 59491 failed: server closed the connection unexpectedly
>    #       This probably means the server terminated abnormally
>    #       before or while processing the request.
>    # server closed the connection unexpectedly
>    #       This probably means the server terminated abnormally
>    #       before or while processing the request.
>    # server closed the connection unexpectedly
>    #       This probably means the server terminated abnormally
>    #       before or while processing the request.'
>    #     doesn't match '(?^:SSL error: sslv3 alert certificate revoked)'
> 
> There's nothing terribly suspicious in the server log, so I'm not quite
> sure what's going on here.

Trying out HEAD as of 20 minutes ago in Andres' MSVC setup on Cirrus CI I'm
unable to replicate this.  Did you remake the keys/certs or are they the files
from the repo?  Which version of OpenSSL is this using?

--
Daniel Gustafsson		https://vmware.com/




Commits

  1. On Windows, also call shutdown() while closing the client socket.

  2. On Windows, close the client socket explicitly during backend shutdown.