postgres.git / summary / log / commit / refs

commit    01bcfe705d69e0b9b50c752742a79bb88bdc72ff
Author:   Bruce Momjian <bruce@momjian.us>
Date:     Mon Aug 31 20:21:03 2020 +0000
First released in: 14.0, 9.5.24, 9.6.20, 10.15, 11.10, 12.5, 13.0

    docs:  clarify intermediate certificate creation instructions
    
    Specifically, explain the v3_ca openssl specification.
    
    Discussion: https://postgr.es/m/20200824175653.GA32411@momjian.us
    
    Backpatch-through: 9.5


 doc/src/sgml/runtime.sgml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/doc/src/sgml/runtime.sgml b/doc/src/sgml/runtime.sgml
index e84332cdee6..6801a1aecce 100644
--- a/doc/src/sgml/runtime.sgml
+++ b/doc/src/sgml/runtime.sgml
@@ -2324,8 +2324,10 @@ pg_dumpall -p 5432 | psql -d postgres -p 5433
    The certificates of <quote>intermediate</quote> certificate authorities
    can also be appended to the file.  Doing this avoids the necessity of
    storing intermediate certificates on clients, assuming the root and
-   intermediate certificates were created with <literal>v3_ca</literal>
-   extensions.  This allows easier expiration of intermediate certificates.
+   intermediate certificates were created with <literal>v3_ca </literal>
+   extensions.  (This sets the certificate's basic constraint of
+   <literal>CA</literal> to <literal>true</literal>.)
+   This allows easier expiration of intermediate certificates.
   </para>
 
   <para>


[parent: 0d447ba962bb]