pgsql: Update ssl test certificates and keys

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

pgsql: Update ssl test certificates and keys

Peter Eisentraut-2
Update ssl test certificates and keys

Debian testing and newer now require that RSA and DHE keys are at
least 2048 bit long and no longer allow SHA-1 for signatures in
certificates.  This is currently causing the ssl tests to fail there
because the test certificates and keys have been created in violation
of those conditions.

Update the parameters to create the test files and create a new set of
test files.

Author: Kyotaro HORIGUCHI <[hidden email]>
Reported-by: Michael Paquier <[hidden email]>
Discussion: https://www.postgresql.org/message-id/flat/20180917131340.GE31460%40paquier.xyz

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/f17889b2214194d7bd33900509bf08959d5a7efa

Modified Files
--------------
src/test/ssl/Makefile                          |  2 +-
src/test/ssl/cas.config                        |  6 +-
src/test/ssl/ssl/both-cas-1.crt                | 77 ++++++++++++++++----------
src/test/ssl/ssl/both-cas-2.crt                | 77 ++++++++++++++++----------
src/test/ssl/ssl/client+client_ca.crt          | 47 ++++++++++------
src/test/ssl/ssl/client-revoked.crt            | 23 +++++---
src/test/ssl/ssl/client-revoked.key            | 38 ++++++++-----
src/test/ssl/ssl/client.crl                    | 16 +++---
src/test/ssl/ssl/client.crt                    | 23 +++++---
src/test/ssl/ssl/client.key                    | 38 ++++++++-----
src/test/ssl/ssl/client_ca.crt                 | 24 +++++---
src/test/ssl/ssl/client_ca.key                 | 38 ++++++++-----
src/test/ssl/ssl/root+client.crl               | 31 ++++++-----
src/test/ssl/ssl/root+client_ca.crt            | 53 +++++++++++-------
src/test/ssl/ssl/root+server.crl               | 31 ++++++-----
src/test/ssl/ssl/root+server_ca.crt            | 53 +++++++++++-------
src/test/ssl/ssl/root.crl                      | 15 +++--
src/test/ssl/ssl/root_ca.crt                   | 29 ++++++----
src/test/ssl/ssl/root_ca.key                   | 38 ++++++++-----
src/test/ssl/ssl/server-cn-and-alt-names.crt   | 27 +++++----
src/test/ssl/ssl/server-cn-and-alt-names.key   | 38 ++++++++-----
src/test/ssl/ssl/server-cn-only.crt            | 27 +++++----
src/test/ssl/ssl/server-cn-only.key            | 38 ++++++++-----
src/test/ssl/ssl/server-multiple-alt-names.crt | 29 ++++++----
src/test/ssl/ssl/server-multiple-alt-names.key | 38 ++++++++-----
src/test/ssl/ssl/server-no-names.crt           | 26 +++++----
src/test/ssl/ssl/server-no-names.key           | 38 ++++++++-----
src/test/ssl/ssl/server-password.key           | 40 ++++++++-----
src/test/ssl/ssl/server-revoked.crt            | 27 +++++----
src/test/ssl/ssl/server-revoked.key            | 38 ++++++++-----
src/test/ssl/ssl/server-single-alt-name.crt    | 26 +++++----
src/test/ssl/ssl/server-single-alt-name.key    | 38 ++++++++-----
src/test/ssl/ssl/server-ss.crt                 | 28 ++++++----
src/test/ssl/ssl/server-ss.key                 | 38 ++++++++-----
src/test/ssl/ssl/server.crl                    | 16 +++---
src/test/ssl/ssl/server_ca.crt                 | 24 +++++---
src/test/ssl/ssl/server_ca.key                 | 38 ++++++++-----
37 files changed, 769 insertions(+), 464 deletions(-)