Re: pgsql: Update ssl test certificates and keys

Peter Eisentraut <peter.eisentraut@2ndquadrant.com>

From: Peter Eisentraut <peter.eisentraut@2ndquadrant.com>

To: Michael Paquier <michael@paquier.xyz>

Cc: Postgres hackers <pgsql-hackers@postgresql.org>

Date: 2019-01-03T14:36:36Z

Lists: pgsql-hackers

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

Update ssl test certificates and keys
- f17889b22141 12.0 cited

On 23/12/2018 09:04, Michael Paquier wrote:
> On Tue, Nov 27, 2018 at 02:21:39PM +0000, Peter Eisentraut wrote:
>> Update ssl test certificates and keys
>>
>> Debian testing and newer now require that RSA and DHE keys are at
>> least 2048 bit long and no longer allow SHA-1 for signatures in
>> certificates.  This is currently causing the ssl tests to fail there
>> because the test certificates and keys have been created in violation
>> of those conditions.
>>
>> Update the parameters to create the test files and create a new set of
>> test files.
> 
> Peter, would it make sense to back-patch this commit down to where the
> SSL tests have been introduced?  If /etc/ssl/ is not correctly
> configured, this results in failures across branches on Debian if the
> default is used.

done

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services