Received: from maia.hub.org (maia-5.hub.org [200.46.204.29])
	by mail.postgresql.org (Postfix) with ESMTP id 072F91337B90
	for <pgsql-admin-postgresql.org@mail.postgresql.org>;
	Mon,  1 Nov 2010 13:15:18 -0300 (ADT)
Received: from mail.postgresql.org ([200.46.204.86])
	by maia.hub.org (mx1.hub.org [200.46.204.29]) (amavisd-maia, port 10024)
	with ESMTP id 07592-09 for
	<pgsql-admin-postgresql.org@mail.postgresql.org>;
	Mon,  1 Nov 2010 16:15:11 +0000 (UTC)
X-Greylist: from auto-whitelisted by SQLgrey-1.7.6
Received: from locust.cns.vt.edu (locust.cns.vt.edu [198.82.169.14])
	by mail.postgresql.org (Postfix) with ESMTP id C84231337B8D
	for <pgsql-admin@postgresql.org>; Mon,  1 Nov 2010 13:15:10 -0300 (ADT)
Received: by locust.cns.vt.edu (Postfix, from userid 986)
	id EA10E118A62; Mon,  1 Nov 2010 12:14:26 -0400 (EDT)
Date: Mon, 1 Nov 2010 12:14:26 -0400
From: Ray Stell <stellr@cns.vt.edu>
To: pgsql-admin@postgresql.org
Subject: ssl client cert authentication
Message-ID: <20101101161426.GA12503@cns.vt.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.17 (2007-11-01)
X-Virus-Scanned: Maia Mailguard 1.0.1
X-Spam-Status: No, hits=-1.91 tagged_above=-10 required=5 tests=BAYES_00=-1.9,
	T_RP_MATCHES_RCVD=-0.01
X-Spam-Level: 
X-Archive-Number: 201011/5
X-Sequence-Number: 35971

Someone asked about ssl client cert auth recently.  I got
this to work, but something tripped me up.

http://developer.postgresql.org/pgdocs/postgres/ssl-tcp.html

states (very clearly, btw) that, "To require the client to supply a
trusted certificate, place certificates of the certificate authorities
(CAs) you trust in the file root.crt in the data directory."  I had
ASS-U-MEd that root.crt would go in .postgresql as it does for encryption.

This begs the question, why two copies of the same file?