Control: tag -1 moreinfo

Re: Boyd Stephen Smith Jr. 2019-03-17 
<155286006298.75575.15027661784880447919.reportbug@localhost.localdomain>
> Mar 17 11:57:22 monster [email protected][1380]: The PostgreSQL server 
> failed to start. Please check the log output:
> Mar 17 11:57:22 monster [email protected][1380]: 2019-03-17 16:57:21 GMT 
> FATAL:  could not load server certificate file 
> "/etc/ssl/certs/ssl-cert-snakeoil.pem": ee key too small

Hi Boyd,

that error message is directly from openssl, so unrelated to
PostgreSQL. What size is the snakeoil key? Could you post the output
of that command?

  openssl x509 -text -noout < /etc/ssl/certs/ssl-cert-snakeoil.pem

My guess would be that the snakeoil key was generated a very long time
ago, when the key size defaults were less than they are today, and
buster's libssl is now rejecting the key.

Christoph

Reply via email to