Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ebyd1-0003qq-O1 for pgsql-docs@arkaria.postgresql.org; Thu, 18 Jan 2018 01:04:27 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ebyd1-00040G-4B for pgsql-docs@arkaria.postgresql.org; Thu, 18 Jan 2018 01:04:27 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1ebyd0-000406-O6 for pgsql-docs@lists.postgresql.org; Thu, 18 Jan 2018 01:04:27 +0000 Received: from mail-pg0-x242.google.com ([2607:f8b0:400e:c05::242]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1ebyct-0004xi-3Y for pgsql-docs@postgresql.org; Thu, 18 Jan 2018 01:04:25 +0000 Received: by mail-pg0-x242.google.com with SMTP id c194so12532168pga.12 for ; Wed, 17 Jan 2018 17:04:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to; bh=yJIUZDM/cMpkMbViv7TR3CWX+bqYYuLRNlW5VqnZrRs=; b=Xla0UCEKI1Ix/w05bN9dhtt6mhRKX4Cf1ClfekLGdY8jVFydgxcNlyXsxtowlZ7K+m mmD8IdhAQQeKOYe5ehjL/x5u0BMrmnHWM37LbX9YP6CgT/sMV1DLQXos3DdUYElP30Fk Z56kfRdIGO4JrscGsFrZ9m9Y43XwcFFEVny6KQ3i3c27q3I6CCqX0+3j8Jo3mRQEzbhy yqVsd76EuKLVp4UlMNhgE19ILEcO7vLQPsULbWSM4zVcYTEr8UyLDyWgWo31/ft0RcUK mmsiSJO6Ub5s6SQVG+McYv3hOb4G+p6TIM2co4hRL4XDeVMBP27kA6HXGQk+MPWRRfCJ TzWg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to; bh=yJIUZDM/cMpkMbViv7TR3CWX+bqYYuLRNlW5VqnZrRs=; b=FZrYSjyvWdmrY1zqBLL1TaNuE1mvLizIm1SF0zrZk2Ol3aJtj8rohwRFr8wo0mEzHW y4RtCSG5g9shAu+krmuYPVGSxTeJ6VgNSwjTybathgskPz4Hd29GBZS9uV9FKyZ8bfmB oEAVJ2RhNQcS8s2GkFpK7OZO4AgSq6+bFNIcnV1TaTd5J3699okslBFePiZi8ZygPw4G riNGjo2HrZ2hiVYcB+JNZ8agLy0s4lZZeZhzaDwSL/ZgTEv8XAn6/BqGOHGkQSnfJWsX CSEcHSH5sCguxm74BzJdouwBzFOSLU41ZlaHgIb8y9JcUh/7mUv+aI8Pmi8cOK3AVW65 qroQ== X-Gm-Message-State: AKwxytdI+S86DkvfiraPyBp+Wz4smfxXqqwCQEOi/7kPSWcSZERJe280 pvw+vsDAL//BKtbG/tL9JzU= X-Google-Smtp-Source: ACJfBosDABBCdHQcLswRRHfvEMpw/dqQm68cFT31dLjhmSTUZCzImVC0XgThQGjRrEr9ntdJGqD0mg== X-Received: by 10.98.73.76 with SMTP id w73mr16610651pfa.61.1516237457557; Wed, 17 Jan 2018 17:04:17 -0800 (PST) Received: from paquier.xyz (c137162.net61215.cablenet.ne.jp. [61.215.137.162]) by smtp.gmail.com with ESMTPSA id s186sm9002822pgb.67.2018.01.17.17.04.15 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 17 Jan 2018 17:04:16 -0800 (PST) Date: Thu, 18 Jan 2018 10:04:11 +0900 From: Michael Paquier To: Bruce Momjian Cc: PostgreSQL-documentation , Stephen Frost , David Steele Subject: Re: Correction of intermediate certificate handling Message-ID: <20180118010411.GA29962@paquier.xyz> References: <20180116002238.GC12724@momjian.us> <20180116053305.GB2212@paquier.xyz> <20180116162122.GB1470@momjian.us> <20180117000950.GB935@paquier.xyz> <20180117032344.GA26285@momjian.us> <20180117082000.GA13673@paquier.xyz> <20180117123442.GB26285@momjian.us> <20180117133955.GC26285@momjian.us> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="xHFwDpU9dbj6ez1V" Content-Disposition: inline In-Reply-To: <20180117133955.GC26285@momjian.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --xHFwDpU9dbj6ez1V Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Jan 17, 2018 at 08:39:55AM -0500, Bruce Momjian wrote: > On Wed, Jan 17, 2018 at 07:34:42AM -0500, Bruce Momjian wrote: > > > The succession of commands of commands for the intermediate certifica= tes > > > is wild. Could it be possible to explain what each command means? Use= rs > > > would not get lost this way. > >=20 > > Yes, I was not happy about that either. I was afraid that pound-sign > > comments would look like root prompts but I just added them and they > > look fine. Updated patch attached, with some expiration and wording > > adjustments. There is also a new paragraph at the end explaining where > > to place the files. >=20 > Oh, and how far back should these be backpatched? 10? 9.6? 9.3? I am > thinking it should be done as far back as possible as long as it is > simple. No objections from here to back-patch depending on the difficulty. I think that a0572203 has created some conflicts in this area for REL_10_STABLE, nothing huge though. -- Michael --xHFwDpU9dbj6ez1V Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEG72nH6vTowiyblFKnvQgOdbyQH0FAlpf8osACgkQnvQgOdby QH3cRhAAqKFPAF1QdxCK9in2z4vYsh/9MobTgV6UEYJKsw7qsnJQOf9Ch5lG0Y1v eg9DcYdQTfBNGL2eSbUKhAJ2oS8git87+AFNXzeUgKBeQcrP9NMywtPSz1tpkGN/ RKiNPxQSlPb1AQP/r1e+T287mSLadsSrfwGKcEREqtGHdTpBgyk6ZPYcbjMKXuw7 iHcA9FUBV4ZmdaxcgEyatNJpjPSQpqkJ9qC75YOjKiFnFD9lX8d6aToUTCJZvZYJ 8rodIaDdi1E7aCmkBcWtQJ5LezFjgNCENeHIm5n0uTjnZ0GTE5iQq/FFxLDbe4KB h+EutYEbar69d+scGr14vMKAxK7MUcjGvmm3FiJHi4y0YnhwIbnAsYUXDh1Tpe1g wVxj9pLVEjTLA1iZjrbDhjkD9af+1MBAtKXXPB5Ytbgd6mQSkBsKtU83cg4gGjd/ KdKPDlAkkhveK9vO0QMrvEZkUiErT7szA3QnCW6GtlenEkJkAXvbCWe0KxoAmuJv 6Q2jVNpB2UTZlAwHMAdHsD97+JoZiBCCs2nd846rxd3myjv3A9lwbKlh0q69Pd3m MXhD/23tQTMY1XlpIP8UNI+nLNqI4AClofDhHMruNEAzuaSesT22zcFP5WxQe277 gH3izaD+dPz5N5Vd0543vB65BvQRYgihnuR1uEKMb0rJZ/C7QxY= =ycTn -----END PGP SIGNATURE----- --xHFwDpU9dbj6ez1V--