Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ec0i9-0000jn-CH for pgsql-docs@arkaria.postgresql.org; Thu, 18 Jan 2018 03:17:53 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ec0i8-000166-PE for pgsql-docs@arkaria.postgresql.org; Thu, 18 Jan 2018 03:17:52 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1ec0i8-00015w-DC for pgsql-docs@lists.postgresql.org; Thu, 18 Jan 2018 03:17:52 +0000 Received: from mail-pf0-x241.google.com ([2607:f8b0:400e:c00::241]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1ec0i3-0007hr-Ds for pgsql-docs@postgresql.org; Thu, 18 Jan 2018 03:17:51 +0000 Received: by mail-pf0-x241.google.com with SMTP id a88so11684584pfe.12 for ; Wed, 17 Jan 2018 19:17:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to; bh=dGZdSnUuP0IxU6FkdiXx4kOIieVaJKlbxlW9K4xMt84=; b=kcPpAwkBhAo0GO2G5QKX+MwlU7DnZApTxyqUqWeHVTpw+VEbmqlXzuukT4WdHN8Xzh /II4VplyemiCbRG3hDcPPc5ECQM4Et/PImIRfPNCQWVCrv/davN9Ji8xnxX/61y+6mvo c5KMK+XEXL1pWC3iJGdVUkrsweRpoguFt/qd8ytPh3gkrmdYzT0tokyGBxqA2kvgFEZg cAGxE2RRGqifpq3FEea7LizfLwraQG9gQoJuhcB7sQaW1Dp6zgD7rXJhD3vf0ai4aTpz j9efzpwtI7muQMxV/cme98HqkUsBwBG5Y4ZOecyCDA1E24UgCjni8+OWKMQcRhJWL7NZ jn/g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to; bh=dGZdSnUuP0IxU6FkdiXx4kOIieVaJKlbxlW9K4xMt84=; b=Gb+x9BiWJmmiSYM4Y9nI/WZFo4dRbrzAToemV2I9r1i11Sey4ymHkdNT+vkxRWFfB+ 2vDdAkrWNJmP4OSa7hRAl61ggXtuVwR4XNwYDZ/IN/uD5IBdDbsq1zcltxSeVAK2knFz DgJ3LE4iudw8UlYh6y6xRTzdqsYGOh/o2lkYhmd4MtBRUW+izYAcxYCPhdNJOxzvb+6T CxmlR+afgbjxhKwJgIwp+BVESiv5Unky/6b0dWFIN/Mg3F90YJgBkrgJSiB57g7l90eV dtYtqzG649c3Wm178AN7BGzAq8KCH8XhTF8KS6aFO9MI1ThYd5MBauKvnqrACWceDal8 2snQ== X-Gm-Message-State: AKwxytd4AxE/u7xRcHsdRJABRHJqXtHK52Mq5/g54Qx2Q9vhpR7+V09x YnaxzV+6dRRLx7vFh3wA5og= X-Google-Smtp-Source: ACJfBouqyYYA1mMCuAyA9uEyCMvQArJTpb7RdrHAQo440jTiA1hUSYkhwG6DJl2FeNRKIyrESXdGsg== X-Received: by 10.159.194.203 with SMTP id u11mr326601plz.389.1516245465949; Wed, 17 Jan 2018 19:17:45 -0800 (PST) Received: from paquier.xyz (c137162.net61215.cablenet.ne.jp. [61.215.137.162]) by smtp.gmail.com with ESMTPSA id s184sm10035432pfb.9.2018.01.17.19.17.43 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 17 Jan 2018 19:17:44 -0800 (PST) Date: Thu, 18 Jan 2018 12:17:40 +0900 From: Michael Paquier To: Bruce Momjian Cc: PostgreSQL-documentation , Stephen Frost , David Steele Subject: Re: Correction of intermediate certificate handling Message-ID: <20180118031740.GG29962@paquier.xyz> References: <20180116002238.GC12724@momjian.us> <20180116053305.GB2212@paquier.xyz> <20180116162122.GB1470@momjian.us> <20180117000950.GB935@paquier.xyz> <20180117032344.GA26285@momjian.us> <20180117082000.GA13673@paquier.xyz> <20180117123442.GB26285@momjian.us> <20180118012503.GB29962@paquier.xyz> <20180118020017.GC19651@momjian.us> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="QWpDgw58+k1mSFBj" Content-Disposition: inline In-Reply-To: <20180118020017.GC19651@momjian.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --QWpDgw58+k1mSFBj Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Jan 17, 2018 at 09:00:17PM -0500, Bruce Momjian wrote: > On Thu, Jan 18, 2018 at 10:25:03AM +0900, Michael Paquier wrote: > > /etc/ssl/openssl.cnf is not available on macos or Windows, which can > > lead to a bit of confusion as I would imagine that people would > > copy/paste such commands when testing things. Perhaps it would be worth > > mentioning that this path is proper to usual Linux distributions (I can > > see it at least on ArchLinux and Debian), with a reference to this > > OpenSSL link:=20 > > https://www.openssl.org/docs/manmaster/man5/config.html >=20 > One odd thing about the configuration file is that you don't need to > modify it, but you do need to specify it for that command. >=20 > Fixed patch attached. OK, what you are proposing here looks fine to me. That's an improvement. -- Michael --QWpDgw58+k1mSFBj Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEG72nH6vTowiyblFKnvQgOdbyQH0FAlpgEdQACgkQnvQgOdby QH0vpxAAkXIgTsr5ZiNr8w18gHhzliKrWNhlhG7sWAqMWr5VrWGEq3wkrbMbYQAt KF93YsrL4+uQZV17RVFvGHXXseBgesOY6589HiNvMC1sGzFy83gk9IjywQfKU1Fk MmXIB1+eRP0+toT53110kIAxuEfgTdDYkk/gfcE10Ht61uZTLNQJm45WZlf5ofPj 5vSMe+b8Jv1H88ZUMtGz0RiCpGVtKgnLb/g7wFzSgFst2A9vV2oZqeyDcbvQqBD+ PlgdOHIFW4//HyRrAOGXRM5TiVTNa06hTLZ3y4HlU0pP1xUzsuPg0NB4EGyVWe/+ gh5jtfr3q5nBtsNGZXM1h58TOdkHa8kvCXZ8803S2LCteThFuyyxPyvkAAilY3dp a2ekL/XAL0ZypQb7Msop4KM2P6rWY9UaMF1H/+dpx9uq5cFLcVaLf57aXqKt2cA5 I76+vPKkSiFXy0wBELHcMdpEMlN2ugJ6S0vS7ZWvXTgX2j5dcxgpxsHs5GEKN1/X GWkABCLPlg4se4UtAt64T+Iv1gebHfRGH7nyUxHDfbLusvryIVGB8uX/ZhOA62mG 4QTvOILiq9pvI2x1w1TNRUumoFFWibndF4aPrwygF4zC7ohVT9PX1RoYV1FEubtM lWTNOqa56P6dM1d0nEcQQupQWZzi23M/Bvhv+ACOpCrcHjz6b8c= =lPYt -----END PGP SIGNATURE----- --QWpDgw58+k1mSFBj--