pg.ddx.io pgsql-docs@postgresql.org mailing list archive
help / color / mirror / Atom feedSSL string
2+ messages / 2 participants
[nested] [flat]
* SSL string
@ 2019-04-20 02:02 PG Doc comments form <noreply@postgresql.org>
0 siblings, 1 reply; 2+ messages in thread
From: PG Doc comments form @ 2019-04-20 02:02 UTC (permalink / raw)
To: pgsql-docs@lists.postgresql.org; +Cc: jedele@hotmail.com
The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/11/ssl-tcp.html
Description:
In Section 18.9, the example showing how to create an SSL certificate:
openssl req -new -x509 -days 365 -nodes -text -out server.crt \
-keyout server.key -subj "/CN=dbhost.yourdomain.com"
Generating a RSA private key
..............................+++++
..............................................................................................+++++
writing new private key to 'server.key'
-----
name is expected to be in the format /type0=value0/type1=value1/type2=...
where characters may be escaped by \. This name is not in that format:
'/CN=dbhost.yourdomain.com'
problems making Certificate Request
A little research showed me I had to add a /C=<2 character country
name>/L=<location>/ST=<state>/O=<organization>/OU=<organization unit> to the
'/CN=dbhost.yourdomain.com' string. I also discovered that the /C=<country
name> had to be 2 characters.
jim
^ permalink raw reply [nested|flat] 2+ messages in thread
* Re: SSL string
@ 2019-04-20 13:09 Bruce Momjian <bruce@momjian.us>
parent: PG Doc comments form <noreply@postgresql.org>
0 siblings, 0 replies; 2+ messages in thread
From: Bruce Momjian @ 2019-04-20 13:09 UTC (permalink / raw)
To: jedele@hotmail.com; pgsql-docs@lists.postgresql.org
On Sat, Apr 20, 2019 at 02:02:08AM +0000, PG Doc comments form wrote:
> The following documentation comment has been logged on the website:
>
> Page: https://www.postgresql.org/docs/11/ssl-tcp.html
> Description:
>
> In Section 18.9, the example showing how to create an SSL certificate:
>
> openssl req -new -x509 -days 365 -nodes -text -out server.crt \
> -keyout server.key -subj "/CN=dbhost.yourdomain.com"
>
> Generating a RSA private key
> ..............................+++++
> ..............................................................................................+++++
> writing new private key to 'server.key'
> -----
> name is expected to be in the format /type0=value0/type1=value1/type2=...
> where characters may be escaped by \. This name is not in that format:
> '/CN=dbhost.yourdomain.com'
> problems making Certificate Request
>
> A little research showed me I had to add a /C=<2 character country
> name>/L=<location>/ST=<state>/O=<organization>/OU=<organization unit> to the
>
> '/CN=dbhost.yourdomain.com' string. I also discovered that the /C=<country
> name> had to be 2 characters.
What version of openssl is this, and what platform? That command works
for me on Debian stretch, OpenSSL 1.1.0j 20 Nov 2018. What command are
you typing?
--
Bruce Momjian <bruce@momjian.us> http://momjian.us
EnterpriseDB http://enterprisedb.com
+ As you are, so once was I. As I am, so you will be. +
+ Ancient Roman grave inscription +
^ permalink raw reply [nested|flat] 2+ messages in thread
end of thread, other threads:[~2019-04-20 13:09 UTC | newest]
Thread overview: 2+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2019-04-20 02:02 SSL string PG Doc comments form <noreply@postgresql.org>
2019-04-20 13:09 ` Bruce Momjian <bruce@momjian.us>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox