Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1WpZSW-0007aW-N0 for pgsql-admin@arkaria.postgresql.org; Wed, 28 May 2014 08:43:40 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.80) (envelope-from ) id 1WpZSW-00089P-3h for pgsql-admin@arkaria.postgresql.org; Wed, 28 May 2014 08:43:40 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1WpZSV-00086v-4C for pgsql-admin@postgresql.org; Wed, 28 May 2014 08:43:39 +0000 Received: from mail3.neteven.com ([37.59.178.241]) by makus.postgresql.org with esmtp (Exim 4.80) (envelope-from ) id 1WpZSR-0003b1-2I for pgsql-admin@postgresql.org; Wed, 28 May 2014 08:43:37 +0000 Received: from localhost (localhost.localdomain [127.0.0.1]) by mail3.neteven.com (Postfix) with ESMTP id 9E8E22205B9 for ; Wed, 28 May 2014 10:43:27 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mail3.neteven.com Received: from mail3.neteven.com ([127.0.0.1]) by localhost (mail3.neteven.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OZ9Fnw0DM6_b for ; Wed, 28 May 2014 10:43:27 +0200 (CEST) Received: from [10.0.0.17] (62-255-180-159.abo.celeste.fr [159.180.255.62]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail3.neteven.com (Postfix) with ESMTPSA id 34637220399 for ; Wed, 28 May 2014 10:43:26 +0200 (CEST) Message-ID: <5385A1AE.8070404@neteven.com> Date: Wed, 28 May 2014 10:43:26 +0200 From: Thomas SIMON User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: "pgsql-admin@postgresql.org" Subject: CRL problem Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Pg-Spam-Score: 0.1 (/) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-admin Precedence: bulk Sender: pgsql-admin-owner@postgresql.org Hi everyone, I'm trying to set up certificates for the connexions to my PG server, validated by my own PKI, with CRL file . I create server & client certificates, and I can login with my client to the server. If I add my crl with the "ssl_crl_file" parameter, I have immedialety the following error on my client terminal : "psql: SSL error: tlsv1 alert unknown ca" Does anyone know what is the problem ? Thanks -- Thomas -- Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-admin