From: PG Doc comments form <noreply@postgresql.org>
To: pgsql-docs@lists.postgresql.org
Cc: mg2216@cam.ac.uk
Subject: Deprecated openssl command option in documentation
Date: Wed, 18 Jun 2025 11:24:15 +0000
Message-ID: <175024585559.3372338.192465486811785718@wrigleys.postgresql.org> (raw)
The following documentation comment has been logged on the website:
Page: https://www.postgresql.org/docs/17/ssl-tcp.html
Description:
Hi
In the documentation at https://www.postgresql.org/docs/17/ssl-tcp.html, it
says, in 18.9.5. Creating Certificates:
```
To create a simple self-signed certificate for the server, valid for 365
days, use the following OpenSSL command, replacing dbhost.yourdomain.com
with the server's host name:
openssl req -new -x509 -days 365 -nodes -text -out server.crt \
-keyout server.key -subj "/CN=dbhost.yourdomain.com"
```
However, on Ubuntu, running "openssl req --help" shows the following:
```
Output options:
...
-noenc Don't encrypt private keys
-nodes Don't encrypt private keys; deprecated
```
Therefore, I suggest you replace the "-nodes" switch in the command example
to "-noenc".
Ubuntu version:
```
$ cat /etc/os-release
PRETTY_NAME="Ubuntu 22.04.5 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.5 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/";
SUPPORT_URL="https://help.ubuntu.com/";
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/";
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy";
UBUNTU_CODENAME=jammy
```
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-docs@postgresql.org
Cc: noreply@postgresql.org, pgsql-docs@lists.postgresql.org, mg2216@cam.ac.uk
Subject: Re: Deprecated openssl command option in documentation
In-Reply-To: <175024585559.3372338.192465486811785718@wrigleys.postgresql.org>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox