openssl heartbleed

From: "Gabriel E(dot) Sánchez Martínez" <gabrielesanchez(at)gmail(dot)com>
To: Postgres General <pgsql-general(at)postgresql(dot)org>
Subject: openssl heartbleed
Date: 2014-04-09 15:54:43
Message-ID: 53456D43.20001@gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

Hi all,

Our server is running Ubuntu Server 13.10 (we will soon upgrade to
14.04) and PostgreSQL 9.1. We use certificates for all client
authentication on remote connections. The server certificate is
self-signed. In light of the heartbleed bug, should we create a new
server certificate and replace all client certificates? My guess is yes.

Regards,
Gabriel

Responses

Browse pgsql-general by date

  From Date Subject
Next Message Andrew Sullivan 2014-04-09 15:56:30 Re: openssl heartbleed
Previous Message Christofer C. Bell 2014-04-09 15:02:07 Re: Linux vs FreeBSD