Hello Zoltan Chovan, Alexey Serbin, Attila Bukor, Kudu Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/20162
to look at the new patch set (#3).
Change subject: Re-generate test certs with OpenSSL3
......................................................................
Re-generate test certs with OpenSSL3
Some tests (security-itest, rpc-test) have been failing on newer distros
(RHEL9, Ubuntu22) with OpenSSL3. The errors were along the lines of:
'failed md too weak'. Alexey pointed out that the issue was in using
SHA1 for the certificate digest. We opted to re-generate the test certs
with OpenSSL3, such that certs would use non-obsolete ciphers.
I tested this patch (ctest) on RHEL9 with slow tests enabled. All the
tests passed. Moreover, did a round of tests on Ubuntu18, to ensure
backwards compatibility with OpenSSL1.1.
[1] https://raymii.org/s/tutorials/OpenSSL_command_line_Root_and_
Intermediate_CA_including_OCSP_CRL%20and_revocation.html
Change-Id: I4b7f28e76f8bebe3bb4284eaa81e4afe03877420
---
M src/kudu/security/test/test_certs.cc
1 file changed, 681 insertions(+), 508 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/62/20162/3
--
To view, visit http://gerrit.cloudera.org:8080/20162
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I4b7f28e76f8bebe3bb4284eaa81e4afe03877420
Gerrit-Change-Number: 20162
Gerrit-PatchSet: 3
Gerrit-Owner: Marton Greber <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Attila Bukor <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Reviewer: Marton Greber <[email protected]>
Gerrit-Reviewer: Zoltan Chovan <[email protected]>
