ci: Remove OpenSSL 3.1 workaround for missing system CA

Commit 0b5d1fb36 fixed the SSL test to properly handle the error message
from OpenSSL when the system CA pool is missing of invalid, so with that
we can remove the workaround in Cirrus for when Homebrew clears the cert
from OPENSSLDIR.

Author: Jacob Champion <jchampion@timescale.com>
Discussion: https://postgr.es/m/CAAWbhmj3JtKuRcHcMuf1eCJmoZxMXdzLaYpEGmzu9+kgRGpu3A@mail.gmail.com
This commit is contained in:
Daniel Gustafsson 2023-04-24 11:40:23 +02:00
parent 69537f5d17
commit c5e4ec293e
1 changed files with 1 additions and 13 deletions

View File

@ -477,24 +477,12 @@ task:
make \
meson \
openldap \
openssl@3 \
openssl \
python \
tcl-tk \
zstd
brew cleanup -s # to reduce cache size
# brew cleanup removes the empty certs directory in OPENSSLDIR, causing
# OpenSSL to report unexpected errors ("unregistered scheme") during
# verification failures. Put it back for now as a workaround.
#
# https://github.com/orgs/Homebrew/discussions/4030
#
# Note that $(brew --prefix openssl) will give us the opt/ prefix but not
# the etc/ prefix, so we hardcode the full path here. openssl@3 is pinned
# above to try to minimize the chances of this changing beneath us, but it's
# brittle...
mkdir -p "/opt/homebrew/etc/openssl@3/certs"
upload_caches: homebrew
ccache_cache: