Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256)
	(Exim 4.89)
	(envelope-from <pgsql-admin-owner+archive@lists.postgresql.org>)
	id 1idFRQ-0004oh-3n
	for pgsql-admin@arkaria.postgresql.org; Fri, 06 Dec 2019 15:22:48 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.89)
	(envelope-from <pgsql-admin-owner+archive@lists.postgresql.org>)
	id 1idFRO-0005Qh-Sc
	for pgsql-admin@arkaria.postgresql.org; Fri, 06 Dec 2019 15:22:46 +0000
Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29])
	by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256)
	(Exim 4.89)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1idFRO-0005Qa-JA
	for pgsql-admin@lists.postgresql.org; Fri, 06 Dec 2019 15:22:46 +0000
Received: from sss.pgh.pa.us ([66.207.139.130])
	by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256)
	(Exim 4.89)
	(envelope-from <tgl@sss.pgh.pa.us>)
	id 1idFRM-0006Sk-C9
	for pgsql-admin@postgresql.org; Fri, 06 Dec 2019 15:22:46 +0000
Received: from sss1.sss.pgh.pa.us (localhost [127.0.0.1])
	by sss.pgh.pa.us (8.14.4/8.14.4) with ESMTP id xB6FMfYi006471;
	Fri, 6 Dec 2019 10:22:41 -0500
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Martin Goodson <kaemaril@googlemail.com>
cc: pgsql-admin <pgsql-admin@postgresql.org>
Subject: Re: SSL - automatic entry of certificate passphrase in PostgreSQL 10?
In-reply-to: <5DEA56C4.7010408@googlemail.com>
References: <5DEA56C4.7010408@googlemail.com>
Comments: In-reply-to Martin Goodson <kaemaril@googlemail.com>
	message dated "Fri, 06 Dec 2019 13:25:24 +0000"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <6469.1575645761.1@sss.pgh.pa.us>
Date: Fri, 06 Dec 2019 10:22:41 -0500
Message-ID: <6470.1575645761@sss.pgh.pa.us>
List-Id: <pgsql-admin.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgsql-admin@lists.postgresql.org>
List-Owner: <mailto:pgsql-admin-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgsql-admin>
Precedence: bulk

Martin Goodson <kaemaril@googlemail.com> writes:
> Or am I stuck with either requesting a new certificate without the 
> passphrase or going to PostgreSQL 11?

AFAIK, those are your options.  Pre-v11 there was no reasonable way
to work with a server cert that requires a passphrase.

			regards, tom lane