pg.ddx.io pgsql-docs@postgresql.org mailing list archive
help / color / mirror / Atom feedRE: RE: SSL Connections [doc PATCH]
9+ messages / 2 participants
[nested] [flat]
* RE: RE: SSL Connections [doc PATCH]
@ 2000-12-22 11:09 Magnus Hagander <mha@sollentuna.net>
0 siblings, 4 replies; 9+ messages in thread
From: Magnus Hagander @ 2000-12-22 11:09 UTC (permalink / raw)
To: 'Bruce Momjian' <pgman@candle.pha.pa.us>; +Cc: 'pgsql-patches@postgresql.org' <pgsql-patches@postgresql.org>
It looks Ok, but it has one unnecessary step. There is no need to do the "mv
privkey.pem cert.pem.pw" if you just use "privkey.pem" in the following
openssl command (e.g. openssl rsa -in privkey.pem -out cert.pem".
But there is nothing wrong with it as it is now, as far as I can see.
//Magnus
> -----Original Message-----
> From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> Sent: den 21 december 2000 20:15
> To: Magnus Hagander
> Cc: 'Matthew Kirkwood'; 'pgsql-patches@postgresql.org'
> Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
>
>
> I have applied an earlier patch to this file for SSL. Could you check
> the current tree and see how you like it?
>
>
> > Thanks for that one!
> >
> > Here is a patch to update the documentation based on this -
> this should make
> > it less dependant on the version of OpenSSL used.
> >
> > //Magnus
> >
> >
> >
> > > -----Original Message-----
> > > From: Matthew Kirkwood [mailto:matthew@hairy.beasts.org]
> > > Sent: den 21 december 2000 16:49
> > > To: Oliver Elphick
> > > Cc: pgsql-hackers@postgresql.org
> > > Subject: Re: [HACKERS] SSL Connections
> > >
> > >
> > > On Wed, 20 Dec 2000, Oliver Elphick wrote:
> > >
> > > > To create a quick self-signed certificate, use the CA.pl script
> > > > included in OpenSSL:
> > > >
> > > > CA.pl -newcert
> > >
> > > Or you can do it manually:
> > >
> > > openssl req -new -text -out cert.req (you will have to enter
> > > a password)
> > > mv privkey.pem cert.pem.pw
> > > openssl rsa -in cert.pem.pw -out cert.pem (this removes
> the password)
> > > openssl req -x509 -in cert.req -text -key cert.pem -out cert.cert
> > >
> > > Matthew.
> > >
> >
>
> [ Attachment, skipping... ]
>
>
> --
> Bruce Momjian | http://candle.pha.pa.us
> pgman@candle.pha.pa.us | (610) 853-3000
> + If your life is a hard drive, | 830 Blythe Avenue
> + Christ can be your backup. | Drexel Hill,
> Pennsylvania 19026
>
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: RE: SSL Connections [doc PATCH]
@ 2001-01-02 02:19 Bruce Momjian <pgman@candle.pha.pa.us>
parent: Magnus Hagander <mha@sollentuna.net>
3 siblings, 0 replies; 9+ messages in thread
From: Bruce Momjian @ 2001-01-02 02:19 UTC (permalink / raw)
To: Magnus Hagander <mha@sollentuna.net>; +Cc: 'pgsql-patches@postgresql.org' <pgsql-patches@postgresql.org>
If this is a valid point, can someone send me a patch for it? Thanks.
> It looks Ok, but it has one unnecessary step. There is no need to do the "mv
> privkey.pem cert.pem.pw" if you just use "privkey.pem" in the following
> openssl command (e.g. openssl rsa -in privkey.pem -out cert.pem".
> But there is nothing wrong with it as it is now, as far as I can see.
>
>
> //Magnus
>
>
> > -----Original Message-----
> > From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> > Sent: den 21 december 2000 20:15
> > To: Magnus Hagander
> > Cc: 'Matthew Kirkwood'; 'pgsql-patches@postgresql.org'
> > Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
> >
> >
> > I have applied an earlier patch to this file for SSL. Could you check
> > the current tree and see how you like it?
> >
> >
> > > Thanks for that one!
> > >
> > > Here is a patch to update the documentation based on this -
> > this should make
> > > it less dependant on the version of OpenSSL used.
> > >
> > > //Magnus
> > >
> > >
> > >
> > > > -----Original Message-----
> > > > From: Matthew Kirkwood [mailto:matthew@hairy.beasts.org]
> > > > Sent: den 21 december 2000 16:49
> > > > To: Oliver Elphick
> > > > Cc: pgsql-hackers@postgresql.org
> > > > Subject: Re: [HACKERS] SSL Connections
> > > >
> > > >
> > > > On Wed, 20 Dec 2000, Oliver Elphick wrote:
> > > >
> > > > > To create a quick self-signed certificate, use the CA.pl script
> > > > > included in OpenSSL:
> > > > >
> > > > > CA.pl -newcert
> > > >
> > > > Or you can do it manually:
> > > >
> > > > openssl req -new -text -out cert.req (you will have to enter
> > > > a password)
> > > > mv privkey.pem cert.pem.pw
> > > > openssl rsa -in cert.pem.pw -out cert.pem (this removes
> > the password)
> > > > openssl req -x509 -in cert.req -text -key cert.pem -out cert.cert
> > > >
> > > > Matthew.
> > > >
> > >
> >
> > [ Attachment, skipping... ]
> >
> >
> > --
> > Bruce Momjian | http://candle.pha.pa.us
> > pgman@candle.pha.pa.us | (610) 853-3000
> > + If your life is a hard drive, | 830 Blythe Avenue
> > + Christ can be your backup. | Drexel Hill,
> > Pennsylvania 19026
> >
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: RE: SSL Connections [doc PATCH]
@ 2001-01-23 04:53 Bruce Momjian <pgman@candle.pha.pa.us>
parent: Magnus Hagander <mha@sollentuna.net>
3 siblings, 0 replies; 9+ messages in thread
From: Bruce Momjian @ 2001-01-23 04:53 UTC (permalink / raw)
To: Magnus Hagander <mha@sollentuna.net>; +Cc: 'pgsql-patches@postgresql.org' <pgsql-patches@postgresql.org>
Is this resolved?
> It looks Ok, but it has one unnecessary step. There is no need to do the "mv
> privkey.pem cert.pem.pw" if you just use "privkey.pem" in the following
> openssl command (e.g. openssl rsa -in privkey.pem -out cert.pem".
> But there is nothing wrong with it as it is now, as far as I can see.
>
>
> //Magnus
>
>
> > -----Original Message-----
> > From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> > Sent: den 21 december 2000 20:15
> > To: Magnus Hagander
> > Cc: 'Matthew Kirkwood'; 'pgsql-patches@postgresql.org'
> > Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
> >
> >
> > I have applied an earlier patch to this file for SSL. Could you check
> > the current tree and see how you like it?
> >
> >
> > > Thanks for that one!
> > >
> > > Here is a patch to update the documentation based on this -
> > this should make
> > > it less dependant on the version of OpenSSL used.
> > >
> > > //Magnus
> > >
> > >
> > >
> > > > -----Original Message-----
> > > > From: Matthew Kirkwood [mailto:matthew@hairy.beasts.org]
> > > > Sent: den 21 december 2000 16:49
> > > > To: Oliver Elphick
> > > > Cc: pgsql-hackers@postgresql.org
> > > > Subject: Re: [HACKERS] SSL Connections
> > > >
> > > >
> > > > On Wed, 20 Dec 2000, Oliver Elphick wrote:
> > > >
> > > > > To create a quick self-signed certificate, use the CA.pl script
> > > > > included in OpenSSL:
> > > > >
> > > > > CA.pl -newcert
> > > >
> > > > Or you can do it manually:
> > > >
> > > > openssl req -new -text -out cert.req (you will have to enter
> > > > a password)
> > > > mv privkey.pem cert.pem.pw
> > > > openssl rsa -in cert.pem.pw -out cert.pem (this removes
> > the password)
> > > > openssl req -x509 -in cert.req -text -key cert.pem -out cert.cert
> > > >
> > > > Matthew.
> > > >
> > >
> >
> > [ Attachment, skipping... ]
> >
> >
> > --
> > Bruce Momjian | http://candle.pha.pa.us
> > pgman@candle.pha.pa.us | (610) 853-3000
> > + If your life is a hard drive, | 830 Blythe Avenue
> > + Christ can be your backup. | Drexel Hill,
> > Pennsylvania 19026
> >
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: [PATCHES] RE: SSL Connections [doc PATCH]
@ 2001-01-24 14:46 Bruce Momjian <pgman@candle.pha.pa.us>
parent: Magnus Hagander <mha@sollentuna.net>
3 siblings, 0 replies; 9+ messages in thread
From: Bruce Momjian @ 2001-01-24 14:46 UTC (permalink / raw)
To: Magnus Hagander <mha@sollentuna.net>; +Cc: PostgreSQL-development <pgsql-hackers@postgreSQL.org>; pgsql-docs
Again, is this something that needs fixing? Just a YES or NO is all I
need.
> It looks Ok, but it has one unnecessary step. There is no need to do the "mv
> privkey.pem cert.pem.pw" if you just use "privkey.pem" in the following
> openssl command (e.g. openssl rsa -in privkey.pem -out cert.pem".
> But there is nothing wrong with it as it is now, as far as I can see.
>
>
> //Magnus
>
>
> > -----Original Message-----
> > From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> > Sent: den 21 december 2000 20:15
> > To: Magnus Hagander
> > Cc: 'Matthew Kirkwood'; 'pgsql-patches@postgresql.org'
> > Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
> >
> >
> > I have applied an earlier patch to this file for SSL. Could you check
> > the current tree and see how you like it?
> >
> >
> > > Thanks for that one!
> > >
> > > Here is a patch to update the documentation based on this -
> > this should make
> > > it less dependant on the version of OpenSSL used.
> > >
> > > //Magnus
> > >
> > >
> > >
> > > > -----Original Message-----
> > > > From: Matthew Kirkwood [mailto:matthew@hairy.beasts.org]
> > > > Sent: den 21 december 2000 16:49
> > > > To: Oliver Elphick
> > > > Cc: pgsql-hackers@postgresql.org
> > > > Subject: Re: [HACKERS] SSL Connections
> > > >
> > > >
> > > > On Wed, 20 Dec 2000, Oliver Elphick wrote:
> > > >
> > > > > To create a quick self-signed certificate, use the CA.pl script
> > > > > included in OpenSSL:
> > > > >
> > > > > CA.pl -newcert
> > > >
> > > > Or you can do it manually:
> > > >
> > > > openssl req -new -text -out cert.req (you will have to enter
> > > > a password)
> > > > mv privkey.pem cert.pem.pw
> > > > openssl rsa -in cert.pem.pw -out cert.pem (this removes
> > the password)
> > > > openssl req -x509 -in cert.req -text -key cert.pem -out cert.cert
> > > >
> > > > Matthew.
> > > >
> > >
> >
> > [ Attachment, skipping... ]
> >
> >
> > --
> > Bruce Momjian | http://candle.pha.pa.us
> > pgman@candle.pha.pa.us | (610) 853-3000
> > + If your life is a hard drive, | 830 Blythe Avenue
> > + Christ can be your backup. | Drexel Hill,
> > Pennsylvania 19026
> >
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
^ permalink raw reply [nested|flat] 9+ messages in thread
* RE: [PATCHES] RE: SSL Connections [doc PATCH]
@ 2001-01-24 14:58 Magnus Hagander <mha@sollentuna.net>
0 siblings, 1 reply; 9+ messages in thread
From: Magnus Hagander @ 2001-01-24 14:58 UTC (permalink / raw)
To: 'Bruce Momjian' <pgman@candle.pha.pa.us>; +Cc: PostgreSQL-development <pgsql-hackers@postgreSQL.org>; pgsql-docs
Needs fixing - no. The current version *works*.
The fix would remove one unnecessary step from it, but it still *works* in
it's current state.
Sorry about this - I've missed looking at it.
//Magnus
> -----Original Message-----
> From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> Sent: den 24 januari 2001 15:47
> To: Magnus Hagander
> Cc: PostgreSQL-development; PostgreSQL-documentation
> Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
>
>
>
> Again, is this something that needs fixing? Just a YES or NO is all I
> need.
>
>
>
> > It looks Ok, but it has one unnecessary step. There is no
> need to do the "mv
> > privkey.pem cert.pem.pw" if you just use "privkey.pem" in
> the following
> > openssl command (e.g. openssl rsa -in privkey.pem -out cert.pem".
> > But there is nothing wrong with it as it is now, as far as
> I can see.
> >
> >
> > //Magnus
> >
> >
> > > -----Original Message-----
> > > From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> > > Sent: den 21 december 2000 20:15
> > > To: Magnus Hagander
> > > Cc: 'Matthew Kirkwood'; 'pgsql-patches@postgresql.org'
> > > Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
> > >
> > >
> > > I have applied an earlier patch to this file for SSL.
> Could you check
> > > the current tree and see how you like it?
> > >
> > >
> > > > Thanks for that one!
> > > >
> > > > Here is a patch to update the documentation based on this -
> > > this should make
> > > > it less dependant on the version of OpenSSL used.
> > > >
> > > > //Magnus
> > > >
> > > >
> > > >
> > > > > -----Original Message-----
> > > > > From: Matthew Kirkwood [mailto:matthew@hairy.beasts.org]
> > > > > Sent: den 21 december 2000 16:49
> > > > > To: Oliver Elphick
> > > > > Cc: pgsql-hackers@postgresql.org
> > > > > Subject: Re: [HACKERS] SSL Connections
> > > > >
> > > > >
> > > > > On Wed, 20 Dec 2000, Oliver Elphick wrote:
> > > > >
> > > > > > To create a quick self-signed certificate, use the
> CA.pl script
> > > > > > included in OpenSSL:
> > > > > >
> > > > > > CA.pl -newcert
> > > > >
> > > > > Or you can do it manually:
> > > > >
> > > > > openssl req -new -text -out cert.req (you will have to enter
> > > > > a password)
> > > > > mv privkey.pem cert.pem.pw
> > > > > openssl rsa -in cert.pem.pw -out cert.pem (this removes
> > > the password)
> > > > > openssl req -x509 -in cert.req -text -key cert.pem
> -out cert.cert
> > > > >
> > > > > Matthew.
> > > > >
> > > >
> > >
> > > [ Attachment, skipping... ]
> > >
> > >
> > > --
> > > Bruce Momjian | http://candle.pha.pa.us
> > > pgman@candle.pha.pa.us | (610) 853-3000
> > > + If your life is a hard drive, | 830 Blythe Avenue
> > > + Christ can be your backup. | Drexel Hill,
> > > Pennsylvania 19026
> > >
> >
>
>
> --
> Bruce Momjian | http://candle.pha.pa.us
> pgman@candle.pha.pa.us | (610) 853-3000
> + If your life is a hard drive, | 830 Blythe Avenue
> + Christ can be your backup. | Drexel Hill,
> Pennsylvania 19026
>
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: [PATCHES] RE: SSL Connections [doc PATCH]
@ 2001-01-24 15:02 Bruce Momjian <pgman@candle.pha.pa.us>
parent: Magnus Hagander <mha@sollentuna.net>
0 siblings, 0 replies; 9+ messages in thread
From: Bruce Momjian @ 2001-01-24 15:02 UTC (permalink / raw)
To: Magnus Hagander <mha@sollentuna.net>; +Cc: PostgreSQL-development <pgsql-hackers@postgreSQL.org>; pgsql-docs
But shouldn't we remove it to make it clearer?
> Needs fixing - no. The current version *works*.
> The fix would remove one unnecessary step from it, but it still *works* in
> it's current state.
>
> Sorry about this - I've missed looking at it.
>
> //Magnus
>
> > -----Original Message-----
> > From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> > Sent: den 24 januari 2001 15:47
> > To: Magnus Hagander
> > Cc: PostgreSQL-development; PostgreSQL-documentation
> > Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
> >
> >
> >
> > Again, is this something that needs fixing? Just a YES or NO is all I
> > need.
> >
> >
> >
> > > It looks Ok, but it has one unnecessary step. There is no
> > need to do the "mv
> > > privkey.pem cert.pem.pw" if you just use "privkey.pem" in
> > the following
> > > openssl command (e.g. openssl rsa -in privkey.pem -out cert.pem".
> > > But there is nothing wrong with it as it is now, as far as
> > I can see.
> > >
> > >
> > > //Magnus
> > >
> > >
> > > > -----Original Message-----
> > > > From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> > > > Sent: den 21 december 2000 20:15
> > > > To: Magnus Hagander
> > > > Cc: 'Matthew Kirkwood'; 'pgsql-patches@postgresql.org'
> > > > Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
> > > >
> > > >
> > > > I have applied an earlier patch to this file for SSL.
> > Could you check
> > > > the current tree and see how you like it?
> > > >
> > > >
> > > > > Thanks for that one!
> > > > >
> > > > > Here is a patch to update the documentation based on this -
> > > > this should make
> > > > > it less dependant on the version of OpenSSL used.
> > > > >
> > > > > //Magnus
> > > > >
> > > > >
> > > > >
> > > > > > -----Original Message-----
> > > > > > From: Matthew Kirkwood [mailto:matthew@hairy.beasts.org]
> > > > > > Sent: den 21 december 2000 16:49
> > > > > > To: Oliver Elphick
> > > > > > Cc: pgsql-hackers@postgresql.org
> > > > > > Subject: Re: [HACKERS] SSL Connections
> > > > > >
> > > > > >
> > > > > > On Wed, 20 Dec 2000, Oliver Elphick wrote:
> > > > > >
> > > > > > > To create a quick self-signed certificate, use the
> > CA.pl script
> > > > > > > included in OpenSSL:
> > > > > > >
> > > > > > > CA.pl -newcert
> > > > > >
> > > > > > Or you can do it manually:
> > > > > >
> > > > > > openssl req -new -text -out cert.req (you will have to enter
> > > > > > a password)
> > > > > > mv privkey.pem cert.pem.pw
> > > > > > openssl rsa -in cert.pem.pw -out cert.pem (this removes
> > > > the password)
> > > > > > openssl req -x509 -in cert.req -text -key cert.pem
> > -out cert.cert
> > > > > >
> > > > > > Matthew.
> > > > > >
> > > > >
> > > >
> > > > [ Attachment, skipping... ]
> > > >
> > > >
> > > > --
> > > > Bruce Momjian | http://candle.pha.pa.us
> > > > pgman@candle.pha.pa.us | (610) 853-3000
> > > > + If your life is a hard drive, | 830 Blythe Avenue
> > > > + Christ can be your backup. | Drexel Hill,
> > > > Pennsylvania 19026
> > > >
> > >
> >
> >
> > --
> > Bruce Momjian | http://candle.pha.pa.us
> > pgman@candle.pha.pa.us | (610) 853-3000
> > + If your life is a hard drive, | 830 Blythe Avenue
> > + Christ can be your backup. | Drexel Hill,
> > Pennsylvania 19026
> >
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
^ permalink raw reply [nested|flat] 9+ messages in thread
* RE: [PATCHES] RE: SSL Connections [doc PATCH]
@ 2001-01-24 15:08 Magnus Hagander <mha@sollentuna.net>
0 siblings, 1 reply; 9+ messages in thread
From: Magnus Hagander @ 2001-01-24 15:08 UTC (permalink / raw)
To: 'Bruce Momjian' <pgman@candle.pha.pa.us>; +Cc: PostgreSQL-development <pgsql-hackers@postgreSQL.org>; pgsql-docs
That would probably be good, yes :-)
You shuold then change:
mv privkey.pem cert.pem.pw
openssl rsa -in cert.pem.pw -out cert.pem
to
openssl rsa -in privkey.pem -out cert.pem
(Sorry, don't have access to the SGML source now, so I can't give you a
patch)
//Magnus
> -----Original Message-----
> From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> Sent: den 24 januari 2001 16:03
> To: Magnus Hagander
> Cc: PostgreSQL-development; PostgreSQL-documentation
> Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
>
>
>
> But shouldn't we remove it to make it clearer?
>
> > Needs fixing - no. The current version *works*.
> > The fix would remove one unnecessary step from it, but it
> still *works* in
> > it's current state.
> >
> > Sorry about this - I've missed looking at it.
> >
> > //Magnus
> >
> > > -----Original Message-----
> > > From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> > > Sent: den 24 januari 2001 15:47
> > > To: Magnus Hagander
> > > Cc: PostgreSQL-development; PostgreSQL-documentation
> > > Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
> > >
> > >
> > >
> > > Again, is this something that needs fixing? Just a YES
> or NO is all I
> > > need.
> > >
> > >
> > >
> > > > It looks Ok, but it has one unnecessary step. There is no
> > > need to do the "mv
> > > > privkey.pem cert.pem.pw" if you just use "privkey.pem" in
> > > the following
> > > > openssl command (e.g. openssl rsa -in privkey.pem -out
> cert.pem".
> > > > But there is nothing wrong with it as it is now, as far as
> > > I can see.
> > > >
> > > >
> > > > //Magnus
> > > >
> > > >
> > > > > -----Original Message-----
> > > > > From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> > > > > Sent: den 21 december 2000 20:15
> > > > > To: Magnus Hagander
> > > > > Cc: 'Matthew Kirkwood'; 'pgsql-patches@postgresql.org'
> > > > > Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
> > > > >
> > > > >
> > > > > I have applied an earlier patch to this file for SSL.
> > > Could you check
> > > > > the current tree and see how you like it?
> > > > >
> > > > >
> > > > > > Thanks for that one!
> > > > > >
> > > > > > Here is a patch to update the documentation based on this -
> > > > > this should make
> > > > > > it less dependant on the version of OpenSSL used.
> > > > > >
> > > > > > //Magnus
> > > > > >
> > > > > >
> > > > > >
> > > > > > > -----Original Message-----
> > > > > > > From: Matthew Kirkwood [mailto:matthew@hairy.beasts.org]
> > > > > > > Sent: den 21 december 2000 16:49
> > > > > > > To: Oliver Elphick
> > > > > > > Cc: pgsql-hackers@postgresql.org
> > > > > > > Subject: Re: [HACKERS] SSL Connections
> > > > > > >
> > > > > > >
> > > > > > > On Wed, 20 Dec 2000, Oliver Elphick wrote:
> > > > > > >
> > > > > > > > To create a quick self-signed certificate, use the
> > > CA.pl script
> > > > > > > > included in OpenSSL:
> > > > > > > >
> > > > > > > > CA.pl -newcert
> > > > > > >
> > > > > > > Or you can do it manually:
> > > > > > >
> > > > > > > openssl req -new -text -out cert.req (you will
> have to enter
> > > > > > > a password)
> > > > > > > mv privkey.pem cert.pem.pw
> > > > > > > openssl rsa -in cert.pem.pw -out cert.pem (this removes
> > > > > the password)
> > > > > > > openssl req -x509 -in cert.req -text -key cert.pem
> > > -out cert.cert
> > > > > > >
> > > > > > > Matthew.
> > > > > > >
> > > > > >
> > > > >
> > > > > [ Attachment, skipping... ]
> > > > >
> > > > >
> > > > > --
> > > > > Bruce Momjian |
http://candle.pha.pa.us
> > > > pgman@candle.pha.pa.us | (610) 853-3000
> > > > + If your life is a hard drive, | 830 Blythe Avenue
> > > > + Christ can be your backup. | Drexel Hill,
> > > > Pennsylvania 19026
> > > >
> > >
> >
> >
> > --
> > Bruce Momjian | http://candle.pha.pa.us
> > pgman@candle.pha.pa.us | (610) 853-3000
> > + If your life is a hard drive, | 830 Blythe Avenue
> > + Christ can be your backup. | Drexel Hill,
> > Pennsylvania 19026
> >
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
^ permalink raw reply [nested|flat] 9+ messages in thread
* Re: [PATCHES] RE: SSL Connections [doc PATCH]
@ 2001-01-24 15:18 Bruce Momjian <pgman@candle.pha.pa.us>
parent: Magnus Hagander <mha@sollentuna.net>
0 siblings, 0 replies; 9+ messages in thread
From: Bruce Momjian @ 2001-01-24 15:18 UTC (permalink / raw)
To: Magnus Hagander <mha@sollentuna.net>; +Cc: PostgreSQL-development <pgsql-hackers@postgreSQL.org>; pgsql-docs
> That would probably be good, yes :-)
>
> You shuold then change:
> mv privkey.pem cert.pem.pw
> openssl rsa -in cert.pem.pw -out cert.pem
>
> to
> openssl rsa -in privkey.pem -out cert.pem
>
> (Sorry, don't have access to the SGML source now, so I can't give you a
> patch)
OK, the SGML diff is:
---------------------------------------------------------------------------
inline patch 1: doc/src/sgml/runtime.sgml (+1/-2 lines) download inline-1.patch
Index: doc/src/sgml/runtime.sgml
===================================================================
RCS file: /home/projects/pgsql/cvsroot/pgsql/doc/src/sgml/runtime.sgml,v
retrieving revision 1.46
diff -c -r1.46 runtime.sgml
*** doc/src/sgml/runtime.sgml 2001/01/08 21:01:54 1.46
--- doc/src/sgml/runtime.sgml 2001/01/24 15:17:09
***************
*** 1911,1918 ****
To remove the passphrase (as you must if you want automatic start-up of
the postmaster), run the commands
<programlisting>
! mv privkey.pem cert.pem.pw
! openssl rsa -in cert.pem.pw -out cert.pem
</programlisting>
Enter the old passphrase to unlock the existing key. Now do
<programlisting>
--- 1911,1917 ----
To remove the passphrase (as you must if you want automatic start-up of
the postmaster), run the commands
<programlisting>
! openssl rsa -in privkey.pem -out cert.pem
</programlisting>
Enter the old passphrase to unlock the existing key. Now do
<programlisting>
* Re: RE: SSL Connections [doc PATCH]
@ 2001-01-24 15:19 Bruce Momjian <pgman@candle.pha.pa.us>
parent: Magnus Hagander <mha@sollentuna.net>
3 siblings, 0 replies; 9+ messages in thread
From: Bruce Momjian @ 2001-01-24 15:19 UTC (permalink / raw)
To: Magnus Hagander <mha@sollentuna.net>; +Cc: 'pgsql-patches@postgresql.org' <pgsql-patches@postgresql.org>
Change made.
> It looks Ok, but it has one unnecessary step. There is no need to do the "mv
> privkey.pem cert.pem.pw" if you just use "privkey.pem" in the following
> openssl command (e.g. openssl rsa -in privkey.pem -out cert.pem".
> But there is nothing wrong with it as it is now, as far as I can see.
>
>
> //Magnus
>
>
> > -----Original Message-----
> > From: Bruce Momjian [mailto:pgman@candle.pha.pa.us]
> > Sent: den 21 december 2000 20:15
> > To: Magnus Hagander
> > Cc: 'Matthew Kirkwood'; 'pgsql-patches@postgresql.org'
> > Subject: Re: [PATCHES] RE: SSL Connections [doc PATCH]
> >
> >
> > I have applied an earlier patch to this file for SSL. Could you check
> > the current tree and see how you like it?
> >
> >
> > > Thanks for that one!
> > >
> > > Here is a patch to update the documentation based on this -
> > this should make
> > > it less dependant on the version of OpenSSL used.
> > >
> > > //Magnus
> > >
> > >
> > >
> > > > -----Original Message-----
> > > > From: Matthew Kirkwood [mailto:matthew@hairy.beasts.org]
> > > > Sent: den 21 december 2000 16:49
> > > > To: Oliver Elphick
> > > > Cc: pgsql-hackers@postgresql.org
> > > > Subject: Re: [HACKERS] SSL Connections
> > > >
> > > >
> > > > On Wed, 20 Dec 2000, Oliver Elphick wrote:
> > > >
> > > > > To create a quick self-signed certificate, use the CA.pl script
> > > > > included in OpenSSL:
> > > > >
> > > > > CA.pl -newcert
> > > >
> > > > Or you can do it manually:
> > > >
> > > > openssl req -new -text -out cert.req (you will have to enter
> > > > a password)
> > > > mv privkey.pem cert.pem.pw
> > > > openssl rsa -in cert.pem.pw -out cert.pem (this removes
> > the password)
> > > > openssl req -x509 -in cert.req -text -key cert.pem -out cert.cert
> > > >
> > > > Matthew.
> > > >
> > >
> >
> > [ Attachment, skipping... ]
> >
> >
> > --
> > Bruce Momjian | http://candle.pha.pa.us
> > pgman@candle.pha.pa.us | (610) 853-3000
> > + If your life is a hard drive, | 830 Blythe Avenue
> > + Christ can be your backup. | Drexel Hill,
> > Pennsylvania 19026
> >
>
--
Bruce Momjian | http://candle.pha.pa.us
pgman@candle.pha.pa.us | (610) 853-3000
+ If your life is a hard drive, | 830 Blythe Avenue
+ Christ can be your backup. | Drexel Hill, Pennsylvania 19026
^ permalink raw reply [nested|flat] 9+ messages in thread
end of thread, other threads:[~2001-01-24 15:19 UTC | newest]
Thread overview: 9+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2000-12-22 11:09 RE: RE: SSL Connections [doc PATCH] Magnus Hagander <mha@sollentuna.net>
2001-01-02 02:19 ` Bruce Momjian <pgman@candle.pha.pa.us>
2001-01-23 04:53 ` Bruce Momjian <pgman@candle.pha.pa.us>
2001-01-24 14:46 ` Bruce Momjian <pgman@candle.pha.pa.us>
2001-01-24 15:19 ` Bruce Momjian <pgman@candle.pha.pa.us>
2001-01-24 14:58 RE: [PATCHES] RE: SSL Connections [doc PATCH] Magnus Hagander <mha@sollentuna.net>
2001-01-24 15:02 ` Bruce Momjian <pgman@candle.pha.pa.us>
2001-01-24 15:08 RE: [PATCHES] RE: SSL Connections [doc PATCH] Magnus Hagander <mha@sollentuna.net>
2001-01-24 15:18 ` Bruce Momjian <pgman@candle.pha.pa.us>
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox