Re: SSL tests - Mailing list buildfarm-members

From Andrew Dunstan
Subject Re: SSL tests
Date
Msg-id 192d7b4f-16e4-404c-ac4b-9f8fa680f5cf@dunslane.net
Whole thread Raw
In response to Re: SSL tests  (Olaf Bohlen <olbohlen@eenfach.de>)
Responses Re: SSL tests  (Olaf Bohlen <olbohlen@eenfach.de>)
List buildfarm-members
On 2024-04-04 Th 09:59, Olaf Bohlen wrote:
> Andrew Dunstan <andrew@dunslane.net> writes:
>
> Hi Andres,
>
>> In general, unless your animal is running on a multi-user system,
>> enabling these tests should be safe, which you could do by
>> uncommenting the last line above or inserting it into your config file
>> if not present.
> Could you elaborate a bit on this? My animal is indeed running as
> a Container on a multi-user system. Is it "just" extreme cpu
> intensive or are there other aspects?
>

No, it's more a security issue. We have to run the server for SSL tests 
with TCP enabled, meaning other users on the localhost can connect to 
it. If untrusted users in your multi-user environment can connect to a 
socket in your container, then you probably should not turn this on.


cheers


andrew

--
Andrew Dunstan
EDB: https://www.enterprisedb.com




buildfarm-members by date:

Previous
From: Wolfgang Walther
Date:
Subject: Re: SSL tests
Next
From: Andrew Dunstan
Date:
Subject: Re: Server upgrade.