From: Daniel Gustafsson Date: Mon, 16 Feb 2026 14:10:16 +0000 (+0100) Subject: Avoid using the X25519 curve in ssl tests X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=07e90c6913586a5c46e55e162771aaa5a33811ba;p=thirdparty%2Fpostgresql.git Avoid using the X25519 curve in ssl tests The X25519 curve is disallowed when OpenSSL is configured for FIPS mode which makes the testsuite fail. Since X25519 isn't required for the tests we can remove it to allow FIPS enabled configurations to run the tests. Author: Daniel Gustafsson Reported-by: Tom Lane Discussion: https://postgr.es/m/3521653.1770666093@sss.pgh.pa.us --- diff --git a/src/test/ssl/t/SSL/Server.pm b/src/test/ssl/t/SSL/Server.pm index a023fa6bdee..4c101a26503 100644 --- a/src/test/ssl/t/SSL/Server.pm +++ b/src/test/ssl/t/SSL/Server.pm @@ -324,7 +324,7 @@ sub switch_server_cert $node->append_conf('sslconfig.conf', $backend->set_server_cert(\%params)); # use lists of ECDH curves and cipher suites for syntax testing $node->append_conf('sslconfig.conf', - 'ssl_groups=X25519:prime256v1:secp521r1'); + 'ssl_groups=prime256v1:secp521r1'); $node->append_conf('sslconfig.conf', 'ssl_tls13_ciphers=TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256');