public inbox for [email protected]  

help / color / mirror / Atom feed

From: Andrew Dunstan <[email protected]>
To: Olaf Bohlen <[email protected]>
Cc: [email protected]
Subject: Re: SSL tests
Date: Thu, 4 Apr 2024 10:29:17 -0400
Message-ID: <[email protected]> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>
	<[email protected]>


On 2024-04-04 Th 09:59, Olaf Bohlen wrote:
> Andrew Dunstan <[email protected]> writes:
>
> Hi Andres,
>
>> In general, unless your animal is running on a multi-user system,
>> enabling these tests should be safe, which you could do by
>> uncommenting the last line above or inserting it into your config file
>> if not present.
> Could you elaborate a bit on this? My animal is indeed running as
> a Container on a multi-user system. Is it "just" extreme cpu
> intensive or are there other aspects?
>

No, it's more a security issue. We have to run the server for SSL tests 
with TCP enabled, meaning other users on the localhost can connect to 
it. If untrusted users in your multi-user environment can connect to a 
socket in your container, then you probably should not turn this on.


cheers


andrew

--
Andrew Dunstan
EDB: https://www.enterprisedb.com

view thread (9+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: SSL tests
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox