Alexey Serbin has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/20162 )
Change subject: Re-generate test certs with OpenSSL3 ...................................................................... Re-generate test certs with OpenSSL3 Some tests (security-itest, rpc-test) have been failing on newer distros (RHEL9, Ubuntu22) with OpenSSL3. The errors were along the lines of: 'failed md too weak'. Alexey pointed out that the issue was in using SHA1 for the certificate digest. We opted to re-generate the test certs with OpenSSL3, such that certs would use non-obsolete ciphers. I tested this patch (ctest) on RHEL9 with slow tests enabled. All the tests passed. Moreover, did a round of tests on Ubuntu18, to ensure backwards compatibility with OpenSSL1.1. Change-Id: I4b7f28e76f8bebe3bb4284eaa81e4afe03877420 Reviewed-on: http://gerrit.cloudera.org:8080/20162 Tested-by: Kudu Jenkins Reviewed-by: Alexey Serbin <[email protected]> --- M src/kudu/security/test/test_certs.cc 1 file changed, 681 insertions(+), 508 deletions(-) Approvals: Kudu Jenkins: Verified Alexey Serbin: Looks good to me, approved -- To view, visit http://gerrit.cloudera.org:8080/20162 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: I4b7f28e76f8bebe3bb4284eaa81e4afe03877420 Gerrit-Change-Number: 20162 Gerrit-PatchSet: 5 Gerrit-Owner: Marton Greber <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Attila Bukor <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Marton Greber <[email protected]> Gerrit-Reviewer: Zoltan Chovan <[email protected]>
