Fix 024.cert_auth regression failure on CentOS6.
authorTatsuo Ishii <ishii@sraoss.co.jp>
Thu, 19 Mar 2020 14:20:48 +0000 (23:20 +0900)
committerTatsuo Ishii <ishii@sraoss.co.jp>
Thu, 19 Mar 2020 14:20:48 +0000 (23:20 +0900)
Recent addition of CRL support causes regression failure of
024.cert_auth only on CentOS6, because of the default key length
difference in different OpenSSL versions. Fix is, explicitly specify
key length.

Author: Umar Hayat
Discussion: https://www.pgpool.net/pipermail/pgpool-hackers/2020-March/003560.html

src/test/regression/tests/024.cert_auth/cert.sh

index 673d6980a57adecf264cbf683ba94544d81c4949..f50466bce7ff847e7e4827bab611285876eb7aec 100755 (executable)
@@ -49,11 +49,15 @@ emailAddress            = optional
 
 [req]
 distinguished_name  = req_distinguished_name
+default_bits        = 2048
 
 [req_distinguished_name]
 
 EOF
 
+# Print OpenSSL version
+openssl version
+
 # Create root cert
 openssl req -new -x509 -nodes -out root.crt -keyout root.key -config crl_openssl.conf -days 365 -subj /CN=MyRootCA
 # PostgreSQL/Pgpool cert