postgres.git / summary / log / commit / refs

commit    da9cb249575229cbdebd27a3ba398efd072aa84b
Author:   Daniel Gustafsson <dgustafsson@postgresql.org>
Date:     Thu Feb 01 08:36:34 2024 +0000
First released in: 17.0, 14.11, 15.6, 16.2

    doc: Fix incorrect openssl option
    
    The openssl command for displaying the DN of a client certificate was
    using --subject and not the single-dash option -subject. While recent
    versions of openssl handles double dash options,  earlier does not so
    fix by using just -subject  (which is per the openssl documentation).
    
    Backpatch to v14 where this was introduced.
    
    Reported-by: konkove@gmail.com
    Discussion: https://postgr.es/m/170672168899.666.10442618407194498217@wrigleys.postgresql.org
    Backpatch-through: v14


 doc/src/sgml/client-auth.sgml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/doc/src/sgml/client-auth.sgml b/doc/src/sgml/client-auth.sgml
index 20d0c31ed3b..68e73b9c328 100644
--- a/doc/src/sgml/client-auth.sgml
+++ b/doc/src/sgml/client-auth.sgml
@@ -631,7 +631,7 @@ hostnogssenc  <replaceable>database</replaceable>  <replaceable>user</replaceabl
        format. To see the <literal>DN</literal> of a client certificate
        in this format, do
 <programlisting>
-openssl x509 -in myclient.crt -noout --subject -nameopt RFC2253 | sed "s/^subject=//"
+openssl x509 -in myclient.crt -noout -subject -nameopt RFC2253 | sed "s/^subject=//"
 </programlisting>
         Care needs to be taken when using this option, especially when using
         regular expression matching against the <literal>DN</literal>.


[parent: 171d21f50c3e]