Extended test coverage and docs for SSL passphrase commands

From: Daniel Gustafsson <daniel(at)yesql(dot)se>
To: Postgres hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org>
Subject: Extended test coverage and docs for SSL passphrase commands
Date: 2025-11-07 20:26:38
Message-ID: 5F301096-921A-427D-8EC1-EBAEC2A35082@yesql.se
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

When I was writing tests for the SSL SNI patch [0] I realized that the current
tests for ssl passphrase commands aren't fully exercising the feature, so I
extended them to better understand how it works. Attached is an extended set
of tests for passphrase protected keys where connection and reloads are tested
as well as their different characteristics on Windows.

The patchset also contains a small doc addition which documents the fact that
passphrase command reloading must be on when running on Windows (EXEC_BACKEND)
since every backend will issue a SSL configuration reload.

--
Daniel Gustafsson

Attachment Content-Type Size
v1-0002-ssl-Add-connection-and-reload-tests-for-key-passp.patch application/octet-stream 7.3 KB
v1-0001-doc-Clarify-passphrase-command-reloading-on-Windo.patch application/octet-stream 2.3 KB

Browse pgsql-hackers by date

  From Date Subject
Next Message Alexander Korotkov 2025-11-07 22:02:36 Re: Implement waiting for wal lsn replay: reloaded
Previous Message Tom Lane 2025-11-07 19:58:49 Draft back-branch release notes are up