From: PG Doc comments form <noreply@postgresql.org>
To: pgsql-docs@lists.postgresql.org
Cc: jedele@hotmail.com
Subject: SSL string
Date: Sat, 20 Apr 2019 02:02:08 +0000
Message-ID: <155572572828.1369.12462908524968666002@wrigleys.postgresql.org> (raw)
The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/11/ssl-tcp.html
Description:
In Section 18.9, the example showing how to create an SSL certificate:
openssl req -new -x509 -days 365 -nodes -text -out server.crt \
-keyout server.key -subj "/CN=dbhost.yourdomain.com"
Generating a RSA private key
..............................+++++
..............................................................................................+++++
writing new private key to 'server.key'
-----
name is expected to be in the format /type0=value0/type1=value1/type2=...
where characters may be escaped by \. This name is not in that format:
'/CN=dbhost.yourdomain.com'
problems making Certificate Request
A little research showed me I had to add a /C=<2 character country
name>/L=<location>/ST=<state>/O=<organization>/OU=<organization unit> to the
'/CN=dbhost.yourdomain.com' string. I also discovered that the /C=<country
name> had to be 2 characters.
jim
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: noreply@postgresql.org, pgsql-docs@lists.postgresql.org, jedele@hotmail.com
Subject: Re: SSL string
In-Reply-To: <155572572828.1369.12462908524968666002@wrigleys.postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox