postgresql/src/test/modules/ssl_passphrase_callback
Peter Eisentraut 648c72956f Convert encrypted SSL test keys to PKCS#8 format
OpenSSL in FIPS mode rejects several encrypted private keys used in
the test suites ssl and ssl_passphrase_callback.  This is because they
are in a "traditional" OpenSSL format that uses MD5 for key
generation.  The fix is to convert them to the more standard PKCS#8
format that uses SHA1 for key derivation.

This commit contains the converted keys, with the conversion done like
this:

openssl pkcs8 -topk8 -in src/test/modules/ssl_passphrase_callback/server.key -passin pass:FooBaR1 -out src/test/modules/ssl_passphrase_callback/server.key.new -passout pass:FooBaR1
mv src/test/modules/ssl_passphrase_callback/server.key.new src/test/modules/ssl_passphrase_callback/server.key

etc., as well as updated build rules to generate the keys in the new
format if they need to be regenerated.

Reviewed-by: Jacob Champion <jchampion@timescale.com>
Discussion: https://www.postgresql.org/message-id/flat/64de784b-8833-e055-3bd4-7420e6675351%40eisentraut.org
2023-08-28 07:37:43 +02:00
..
t Pre-beta mechanical code beautification. 2023-05-19 17:24:48 -04:00
.gitignore Provide a TLS init hook 2020-03-25 17:13:17 -04:00
Makefile Convert encrypted SSL test keys to PKCS#8 format 2023-08-28 07:37:43 +02:00
meson.build Convert encrypted SSL test keys to PKCS#8 format 2023-08-28 07:37:43 +02:00
server.crt Provide a TLS init hook 2020-03-25 17:13:17 -04:00
server.key Convert encrypted SSL test keys to PKCS#8 format 2023-08-28 07:37:43 +02:00
ssl_passphrase_func.c Remove now superfluous declarations of dlsym()ed symbols. 2022-07-17 17:29:32 -07:00