From: John Scalia <jayknowsunix@gmail.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: pgsql-admin@postgresql.org
Subject: Re: SSL certificate revocation file will not load
Date: Wed, 14 Jun 2017 19:18:28 -0400
Message-ID: <E906CB62-390C-48B3-A986-2217539C7627@gmail.com> (raw)
In-Reply-To: <26527.1497478022@sss.pgh.pa.us>
References: <CABzCKRCjpiosAEVujuvBN+KOzdaQSJyLuo-TTQdmc98PqcKjNA@mail.gmail.com>
<23871.1497473425@sss.pgh.pa.us>
<68DC7C40-A815-4F80-924A-45C07A463D55@gmail.com>
<26527.1497478022@sss.pgh.pa.us>
List-Unsubscribe: <mailto:majordomo@postgresql.org?body=unsub%20pgsql-admin>
Thanks, I'll try to convince the management to upgrade ASAP once 10 makes it into a production release.
Sent from my iPad
> On Jun 14, 2017, at 6:07 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>
> John Scalia <jayknowsunix@gmail.com> writes:
>> Well, it turned out that the CRL was in the wrong format. So, I managed
>> to convert it with OpenSSL and it loaded properly. I do have one more
>> question... the Treasury Department, which produces these certificates
>> for us, expires all the CRL's in just 6 hours,
>
> Ugh.
>
>> so does that mean I'd have to do restart on the database each time I got
>> a new one or would a reload work?
>
> As of PG 10, a reload would work, but in prior versions you'll have to
> restart to get it to pick up new SSL config files.
>
> If you're feeling desperate you could try back-patching commit de41869b6,
> but keep in mind that hasn't made it through a beta-test cycle yet.
>
> regards, tom lane
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: jayknowsunix@gmail.com, tgl@sss.pgh.pa.us
Subject: Re: SSL certificate revocation file will not load
In-Reply-To: <E906CB62-390C-48B3-A986-2217539C7627@gmail.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox