Re: SSL tests failing with "ee key too small" error on Debian SID

Поиск
Список
Период
Сортировка
Искать
От
Michael Paquier
Тема
Re: SSL tests failing with "ee key too small" error on Debian SID
Дата
Msg-id
20181127210539.GI1716@paquier.xyz
Ответ на
Список
Дерево обсуждения
SSL tests failing with "ee key too small" error on Debian SID Michael Paquier <michael@paquier.xyz>
Re: SSL tests failing with "ee key too small" error on Debian SID Kyotaro HORIGUCHI <horiguchi.kyotaro@lab.ntt.co.jp>
Re: SSL tests failing with "ee key too small" error on Debian SID Michael Paquier <michael@paquier.xyz>
Re: SSL tests failing with "ee key too small" error on Debian SID Kyotaro HORIGUCHI <horiguchi.kyotaro@lab.ntt.co.jp>
Re: SSL tests failing with "ee key too small" error on Debian SID Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: SSL tests failing with "ee key too small" error on Debian SID Michael Paquier <michael@paquier.xyz>
Re: SSL tests failing with "ee key too small" error on Debian SID Thomas Munro <thomas.munro@enterprisedb.com>
Re: SSL tests failing with "ee key too small" error on Debian SID Michael Paquier <michael@paquier.xyz>
Re: SSL tests failing with "ee key too small" error on Debian SID Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: SSL tests failing with "ee key too small" error on Debian SID Peter Eisentraut <peter.eisentraut@2ndquadrant.com>
Re: SSL tests failing with "ee key too small" error on Debian SID Tom Lane <tgl@sss.pgh.pa.us>
Re: SSL tests failing with "ee key too small" error on Debian SID Michael Paquier <michael@paquier.xyz>
On Tue, Nov 27, 2018 at 09:37:17AM -0500, Tom Lane wrote:
> Peter Eisentraut  writes:
>> On 01/10/2018 14:18, Kyotaro HORIGUCHI wrote:
>>> The attached second patch just changes key size to 2048 bits and
>>> "ee key too small" are eliminated in 001_ssltests_master, but
>>> instead I got "ca md too weak" error. This is eliminated by using
>>> sha256 instead of sha1 in cas.config. (third attached)
> 
>> I have applied these configuration changes and created a new set of test
>> files with them.
> 
> Buildfarm critters aren't going to be happy unless you back-patch that.

Thanks for applying that, Peter.
--
Michael
В списке pgsql-hackers по дате отправления
От: Tom Lane
Дата:
Сообщение: Re: tab-completion debug print
От: Michael Paquier
Дата:
FAQ