Re: SSL tests

On 2024-04-04 Th 09:59, Olaf Bohlen wrote:
> Andrew Dunstan <andrew(at)dunslane(dot)net> writes:
>
> Hi Andres,
>
>> In general, unless your animal is running on a multi-user system,
>> enabling these tests should be safe, which you could do by
>> uncommenting the last line above or inserting it into your config file
>> if not present.
> Could you elaborate a bit on this? My animal is indeed running as
> a Container on a multi-user system. Is it "just" extreme cpu
> intensive or are there other aspects?
>

No, it's more a security issue. We have to run the server for SSL tests
with TCP enabled, meaning other users on the localhost can connect to
it. If untrusted users in your multi-user environment can connect to a
socket in your container, then you probably should not turn this on.

cheers

andrew

--
Andrew Dunstan
EDB: https://www.enterprisedb.com