[IGNITE-13042] Update SSL certificates in C++ test suites to more secure signature

• Type: Test
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.8.1
• Fix Version/s: 2.9
• Component/s: platforms
• Assignee: Igor Sapego
• Reporter: Ivan Daschinsky
• Created: 20/May/20 13:27
• Updated: 24/Jun/20 10:03
• Resolved: 24/Jun/20 10:02

Description

When modern openssl is used (i.e OpenSSL 1.1.1f, which is default for ubuntu 20.04, for example), provided certificates are not accepted, because Sha1WithRSAEncryption signature is used, that is widely considered flaw. So certificates needs to be renewed (i.e. with sha256WithRSAEncryption signature)

Example error:

Connecting to 127.0.0.1:11110
140246535644992:error:140AB18E:SSL routines:SSL_CTX_use_certificate:ca md too weak:../ssl/ssl_rsa.c:310:
Failed to connect :Can not set client certificate file for secure connection: path /home/ivandasch/ignite/modules/platforms/cpp/thin-client-test/config/ssl/client_full.pem

Affected ignite-odbc-tests and ignite-thin-client-tests

Issue Links

• links to: GitHub Pull Request #7954