Re: BUG #17391: While using --with-ssl=openssl and PG_TEST_EXTRA='ssl' options, SSL tests fail on OpenBSD 7.0

On Sat, Feb 5, 2022 at 3:12 AM Daniel Gustafsson <daniel@yesql.se> wrote:
> Thomas: Does the attached reproduce these results for you?

-bash-5.1$ uname -a
OpenBSD openbsd6.localdomain 6.9 GENERIC.MP#473 amd64
-bash-5.1$ openssl version
LibreSSL 3.3.2
-bash-5.1$ git rev-parse HEAD
b31e3f561365136b48d63e8561f32b697df16d1d
-bash-5.1$ curl -s
https://www.postgresql.org/message-id/attachment/130677/kludge.diff |
patch -s -p1
-bash-5.1$ ./rebuild.sh
-bash-5.1$ gmake -s -C src/test/ssl check
t/001_ssltests.pl .. ok
t/002_scram.pl ..... ok
t/003_sslinfo.pl ... ok
All tests successful.
Files=3, Tests=134, 26 wallclock secs ( 0.18 usr  0.05 sys +  4.46
cusr  7.16 csys = 11.85 CPU)
Result: PASS

If I comment out your sleep(1), I get:

-bash-5.1$ gmake -s -C src/test/ssl check
t/001_ssltests.pl .. 80/110
#   Failed test 'certificate authorization fails with revoked client
cert: matches'
#   at t/001_ssltests.pl line 565.
#                   'psql: error: connection to server at "127.0.0.1",
port 61927 failed: server closed the connection unexpectedly
#     This probably means the server terminated abnormally
#     before or while processing the request.
# SSL SYSCALL error: Broken pipe'
#     doesn't match '(?^:SSL error: sslv3 alert certificate revoked)'
t/001_ssltests.pl .. 107/110
#   Failed test 'certificate authorization fails with revoked client
cert with server-side CRL directory: matches'
#   at t/001_ssltests.pl line 618.
#                   'psql: error: connection to server at "127.0.0.1",
port 61927 failed: server closed the connection unexpectedly
#     This probably means the server terminated abnormally
#     before or while processing the request.
# SSL SYSCALL error: Broken pipe
# connection to server at "127.0.0.1", port 61927 failed: FATAL:  no
pg_hba.conf entry for host "127.0.0.1", user "ssltestuser", database
"certdb", no encryption'
#     doesn't match '(?^:SSL error: sslv3 alert certificate revoked)'
# Looks like you failed 2 tests of 110.
t/001_ssltests.pl .. Dubious, test returned 2 (wstat 512, 0x200)
Failed 2/110 subtests
t/002_scram.pl ..... ok
t/003_sslinfo.pl ... ok

Test Summary Report
-------------------
t/001_ssltests.pl (Wstat: 512 Tests: 110 Failed: 2)
  Failed tests:  97, 110
  Non-zero exit status: 2
Files=3, Tests=134, 26 wallclock secs ( 0.07 usr  0.03 sys +  4.81
cusr  6.55 csys = 11.46 CPU)
Result: FAIL
gmake: *** [Makefile:32: check] Error 1