Re: pgsql: Update ssl test certificates and keys

From: Michael Paquier <michael(at)paquier(dot)xyz>
To: Peter Eisentraut <peter_e(at)gmx(dot)net>
Cc: Postgres hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: pgsql: Update ssl test certificates and keys
Date: 2018-12-23 08:04:53
Message-ID: 20181223080453.GD1726@paquier.xyz
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers pgsql-hackers

On Tue, Nov 27, 2018 at 02:21:39PM +0000, Peter Eisentraut wrote:
> Update ssl test certificates and keys
>
> Debian testing and newer now require that RSA and DHE keys are at
> least 2048 bit long and no longer allow SHA-1 for signatures in
> certificates. This is currently causing the ssl tests to fail there
> because the test certificates and keys have been created in violation
> of those conditions.
>
> Update the parameters to create the test files and create a new set of
> test files.

Peter, would it make sense to back-patch this commit down to where the
SSL tests have been introduced? If /etc/ssl/ is not correctly
configured, this results in failures across branches on Debian if the
default is used.
--
Michael

In response to

Responses

Browse pgsql-committers by date

  From Date Subject
Next Message Michael Paquier 2018-12-24 11:28:51 pgsql: Prioritize history files when archiving
Previous Message Michael Paquier 2018-12-23 07:49:05 pgsql: Disable WAL-skipping optimization for COPY on views

Browse pgsql-hackers by date

  From Date Subject
Next Message Dilip Kumar 2018-12-23 10:18:52 Re: Undo logs
Previous Message Jeff Janes 2018-12-23 02:56:53 Re: Query planner / Analyse statistics bad estimate rows=1 with maximum statistics 10000 on PostgreSQL 10.2