Re: SSL tests failing with "ee key too small" error on Debian SID
Michael Paquier <michael@paquier.xyz>
From: Michael Paquier <michael@paquier.xyz>
To: Kyotaro HORIGUCHI <horiguchi.kyotaro@lab.ntt.co.jp>
Cc: pgsql-hackers@postgresql.org, hlinnaka@iki.fi
Date: 2018-09-25T05:26:42Z
Lists: pgsql-hackers
On Tue, Sep 25, 2018 at 12:48:57PM +0900, Kyotaro HORIGUCHI wrote: > Do you mean that cert/key files are generated on-the-fly while > running 'make check'? It sounds reasonable as long as just > replaceing existing files with those with longer (2048bits?) keys > doesn't work for all supported platforms. The files are present by default in the tree, but can be regenerated easily by using the makefile rule "sslfiles". From what I can see, this is caused by OpenSSL 1.1.1 which Debian SID has visibly upgraded to recently. That's the version I have on my system. I have not dug much into the Makefile to see if things could get done right and change the openssl commands though.. -- Michael
Commits
-
Update ssl test certificates and keys
- 7f2576812655 9.5.16 landed
- ba26b3172f03 9.6.12 landed
- 114635e55235 10.7 landed
- 1b0294d9a02c 11.2 landed
- f17889b22141 12.0 landed