Update client certificate subject to root and add SSL mode check in test_pgconn

Author: chenyunliang520

README.rst

@@ -225,7 +225,7 @@ Steps to Run OpenGauss(SSL) with Python GaussDB Driver Testing (Assuming Docker
 
     # Optional: client certificate (for mutual TLS)
     openssl genrsa -out client.key 2048
-    openssl req -new -key client.key -subj "/CN=dbclient" -out client.csr
+    openssl req -new -key client.key -subj "/CN=root" -out client.csr
     openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial \
     -out client.crt -days 730 -sha256
 

tests/pq/test_pgconn.py

@@ -301,6 +301,12 @@ def test_used_password(pgconn, dsn, monkeypatch):
         "PGPASSWORD" in os.environ
         or [i for i in info if i.keyword == b"password"][0].val is not None
     )
+
+    kv = {i.keyword.decode(): (i.val.decode() if i.val else None) for i in info}
+    sslmode = (kv.get("sslmode") or "").lower()
+    if sslmode in ("require", "verify-ca", "verify-full"):
+        pytest.skip(f"Skipping password usage check under sslmode={sslmode}")
+
     if has_password:
         assert pgconn.used_password