Message-ID: <gh-pgjdbc-pgjdbc-3661@github.com>
From: "TyeolRik (@TyeolRik)" <noreply+TyeolRik@github.com>
To: "pgjdbc/pgjdbc" <noreply+pgjdbc-pgjdbc@github.com>
Date: Fri, 13 Jun 2025 00:15:54 +0000
Subject: [pgjdbc/pgjdbc] issue #3661: Why should PKCS12 name (or alias) be "user"?
List-Id: <gh-pgjdbc-pgjdbc.github.com>
X-GitHub-Author-Id: 16433846
X-GitHub-Author-Login: TyeolRik
X-GitHub-Issue: 3661
X-GitHub-Repo: pgjdbc/pgjdbc
X-GitHub-State: closed
X-GitHub-Type: issue
X-GitHub-Url: https://github.com/pgjdbc/pgjdbc/issues/3661
Content-Type: text/plain; charset=utf-8

According to your [official document](https://jdbc.postgresql.org/documentation/use/),
PostgreSQL restricts name of PKCS#12 bag to be `user`.

> NOTE
The key file must be in PKCS-12 or in PKCS-8 DER format. A PEM key can be converted to DER format using the openssl command: openssl pkcs8 -topk8 -inform PEM -in postgresql.key -outform DER -out postgresql.pk8 -v1 PBE-MD5-DES When you create the key the alias or the name must be user. The test codes uses the following to create a .p12 key openssl pkcs12 -export -in $< -inkey $*.key -out $@ -name user -CAfile $(SERVER_CRT_DIR)root.crt -caname local -passout pass:$(P12_PASSWORD)

1. May I ask you WHY?
2. Do you have any plan to let us use not only `user` but also customized name like `tyeolrik_server` or something else?

Thank you for your help.

Sincerely yours,
Tyeolrik