pgjdbc/pgjdbc GitHub issues and pull requests (mirror)  
help / color / mirror / Atom feed
[pgjdbc/pgjdbc] issue #3661: Why should PKCS12 name (or alias) be "user"?
3+ messages / 2 participants
[nested] [flat]

* [pgjdbc/pgjdbc] issue #3661: Why should PKCS12 name (or alias) be "user"?
@ 2025-06-13 00:15 "TyeolRik (@TyeolRik)" <[email protected]>
  0 siblings, 0 replies; 3+ messages in thread

From: TyeolRik (@TyeolRik) @ 2025-06-13 00:15 UTC (permalink / raw)
  To: pgjdbc/pgjdbc <[email protected]>

According to your [official document](https://jdbc.postgresql.org/documentation/use/),
PostgreSQL restricts name of PKCS#12 bag to be `user`.

> NOTE
The key file must be in PKCS-12 or in PKCS-8 DER format. A PEM key can be converted to DER format using the openssl command: openssl pkcs8 -topk8 -inform PEM -in postgresql.key -outform DER -out postgresql.pk8 -v1 PBE-MD5-DES When you create the key the alias or the name must be user. The test codes uses the following to create a .p12 key openssl pkcs12 -export -in $< -inkey $*.key -out $@ -name user -CAfile $(SERVER_CRT_DIR)root.crt -caname local -passout pass:$(P12_PASSWORD)

1. May I ask you WHY?
2. Do you have any plan to let us use not only `user` but also customized name like `tyeolrik_server` or something else?

Thank you for your help.

Sincerely yours,
Tyeolrik

^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: [pgjdbc/pgjdbc] issue #3661: Why should PKCS12 name (or alias) be "user"?
@ 2025-06-13 18:29 ` "davecramer (@davecramer)" <[email protected]>
  1 sibling, 0 replies; 3+ messages in thread

From: davecramer (@davecramer) @ 2025-06-13 18:29 UTC (permalink / raw)
  To: pgjdbc/pgjdbc <[email protected]>

The reason is https://github.com/pgjdbc/pgjdbc/blob/bb911ff6caf9621f5dc06d9db4a0ab52a7fb1668/pgjdbc/src/main/java/...

and currently have no plans to change it. PR's are welcome.

Dave

^ permalink  raw  reply  [nested|flat] 3+ messages in thread

* Re: [pgjdbc/pgjdbc] issue #3661: Why should PKCS12 name (or alias) be "user"?
@ 2025-06-16 00:57 ` "TyeolRik (@TyeolRik)" <[email protected]>
  1 sibling, 0 replies; 3+ messages in thread

From: TyeolRik (@TyeolRik) @ 2025-06-16 00:57 UTC (permalink / raw)
  To: pgjdbc/pgjdbc <[email protected]>

Thank you for your kind instruction.

Well, I want to contribute with that. But not sure if I could do it perfectly HAHA

Have a nice day!

^ permalink  raw  reply  [nested|flat] 3+ messages in thread


end of thread, other threads:[~2025-06-16 00:57 UTC | newest]

Thread overview: 3+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2025-06-13 00:15 [pgjdbc/pgjdbc] issue #3661: Why should PKCS12 name (or alias) be "user"? "TyeolRik (@TyeolRik)" <[email protected]>
2025-06-13 18:29 ` "davecramer (@davecramer)" <[email protected]>
2025-06-16 00:57 ` "TyeolRik (@TyeolRik)" <[email protected]>

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox