Alexey Serbin has uploaded this change for review. ( http://gerrit.cloudera.org:8080/20411
Change subject: Re-generate test certs with OpenSSL3 ...................................................................... Re-generate test certs with OpenSSL3 Some tests (security-itest, rpc-test) have been failing on newer distros (RHEL9, Ubuntu22) with OpenSSL3. The errors were along the lines of: 'failed md too weak'. Alexey pointed out that the issue was in using SHA1 for the certificate digest. We opted to re-generate the test certs with OpenSSL3, such that certs would use non-obsolete ciphers. I tested this patch (ctest) on RHEL9 with slow tests enabled. All the tests passed. Moreover, did a round of tests on Ubuntu18, to ensure backwards compatibility with OpenSSL1.1. Change-Id: I4b7f28e76f8bebe3bb4284eaa81e4afe03877420 Reviewed-on: http://gerrit.cloudera.org:8080/20162 Tested-by: Kudu Jenkins Reviewed-by: Alexey Serbin <[email protected]> (cherry picked from commit 2d624f877262efafcd4fbaa59d7bb5a8c65ff54e) --- M src/kudu/security/test/test_certs.cc 1 file changed, 681 insertions(+), 508 deletions(-) git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/11/20411/1 -- To view, visit http://gerrit.cloudera.org:8080/20411 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: branch-1.17.x Gerrit-MessageType: newchange Gerrit-Change-Id: I4b7f28e76f8bebe3bb4284eaa81e4afe03877420 Gerrit-Change-Number: 20411 Gerrit-PatchSet: 1 Gerrit-Owner: Alexey Serbin <[email protected]> Gerrit-Reviewer: Marton Greber <[email protected]>
