Public bug reported:
A default PostgreSQL installation creates server.crt and server.key
symlinks in the datadir, referencing the default snakeoil SSL
certificate.
When making a filesystem level backup of the database using
pg_basebackup, these symlinks are not backed up and pg_basebackup emits
the following warnings:
WARNING: skipping special file "./server.crt"
WARNING: skipping special file "./server.key"
Recovering the filesystem level backup thus requires the extra platform
specific step of repairing the two missing files:
cd ~/9.1/main
ln -s /etc/ssl/certs/ssl-cert-snakeoil.pem .
ln -s /etc/ssl/private/ssl-cert-snakeoil.key .
To fix this, the locations of these files could be specified with the
ssl_cert_file and ssl_key_file options in postgresql.conf.
Alternatively, the files could be copied rather than symlinked. However,
the SSL certificate and private key should probably not be part of the
backup.
ProblemType: Bug
DistroRelease: Ubuntu 13.04
Package: postgresql 9.1+140
ProcVersionSignature: Ubuntu 3.8.0-29.42-generic 3.8.13.5
Uname: Linux 3.8.0-29-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.9.2-0ubuntu8.3
Architecture: amd64
Date: Thu Aug 29 15:40:03 2013
EcryptfsInUse: Yes
InstallationDate: Installed on 2013-02-26 (184 days ago)
InstallationMedia: Ubuntu 13.04 "Raring Ringtail" - Alpha amd64 (20130225)
MarkForUpload: True
PackageArchitecture: all
SourcePackage: postgresql-common
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: postgresql-common (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug raring
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1218245
Title:
Default SSL certificates installed as symlinks and incompatible with
pg_basebackup
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/postgresql-common/+bug/1218245/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
